Manage 1575

[Moudar]

Hi,

I need to install a Check Point SMB firewall at a branch office. This firewall will be used solely to route all traffic via VPN to the central office, where it will be inspected against the policy rules set on the central office firewall. Does this firewall require a local policy when it is centrally managed?

If so, how should the policy be configured on the central Security Management Server (SMS)?

[the_rock]

It would not need any local policy if its managed centrally, as all the rules would be "pulled" from mgmt server.

[Moudar]

so on central SMS, would it need a new policy rule or same rule installed on central firewall? If new policy, what rules should that policy have?

[the_rock]

Hey bro,

I cant answer that question for sure, as I dont know your rules, but personally, I would set up new policy package just for that new fw and create rules based on the access you need.

Best,

Andy

[PhoneBoy]

When centrally managed, so is the policy (and it has to have one).
The policy would simply allow traffic out from the relevant networks through the VPN connection.