Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Gaetano_Nicosia
Participant

Rule for traffic between two vlan

Jump to solution

Good Morning

I have this "scenario" on my Firewall 730.

On LAN1 Ihave created the VLAN 5, 10, 20

On DMZ  I have created the VLAN 30, 40,50

Now, for example, I need to create a policy so that only the VLAN 10 can reach VLAN 30 and vice versa.

Since I'm new ino CP, can someone explain to me how to create this policy?

Thanks and best regards

Gaetano

0 Kudos
1 Solution

Accepted Solutions
HeikoAnkenbrand
Champion
Champion

1) Creat an network objekt for VLAN 10 with the IP address and network mask for example NET_VLAN10 IP192.168.10.0/24

2) Creat the same for VLAN 30 for example NET_VLAN30 IP19.168.30.0/24

3) Now create a policy with both network objekts in source and destination.

4) Install policy:-)

 

View solution in original post

5 Replies
HeikoAnkenbrand
Champion
Champion

1) Creat an network objekt for VLAN 10 with the IP address and network mask for example NET_VLAN10 IP192.168.10.0/24

2) Creat the same for VLAN 30 for example NET_VLAN30 IP19.168.30.0/24

3) Now create a policy with both network objekts in source and destination.

4) Install policy:-)

 

View solution in original post

HeikoAnkenbrand
Champion
Champion

I recommend you the following articles:

Check Point for beginners

0 Kudos
Gaetano_Nicosia
Participant

Thank You for reply.

just a little clarification: what do you mean by "install policy"?

0 Kudos
Wolfgang
Leader
Leader

If you run your Check Point 730 appliance in central management mode you have to do a "policy install" to push the firewall-policy to your appliance.

But I think you are running your appliance standalone and you are using the Web-UI to manage the firewall-policy. With these configuration you don't need a "policy-install". Clicking the "apply"-button is enough.

Wolfgang

 

G_W_Albrecht
Legend
Legend

No one can run a 730 in central management mode - so this is surely the wrong corner to post the question, it should rather belong to SMB Appliances and SMP

 

0 Kudos