Rule for traffic between two vlan

[Gaetano_Nicosia]

Good Morning

I have this "scenario" on my Firewall 730.

On LAN1 Ihave created the VLAN 5, 10, 20

On DMZ  I have created the VLAN 30, 40,50

Now, for example, I need to create a policy so that only the VLAN 10 can reach VLAN 30 and vice versa.

Since I'm new ino CP, can someone explain to me how to create this policy?

Thanks and best regards

Gaetano

[HeikoAnkenbrand · Accepted solution]

1) Creat an network objekt for VLAN 10 with the IP address and network mask for example NET_VLAN10 IP192.168.10.0/24

2) Creat the same for VLAN 30 for example NET_VLAN30 IP19.168.30.0/24

3) Now create a policy with both network objekts in source and destination.

4) Install policy:-)

[HeikoAnkenbrand]

I recommend you the following articles:

Check Point for beginners

[Gaetano_Nicosia]

Thank You for reply.

just a little clarification: what do you mean by "install policy"?

[Wolfgang]

If you run your Check Point 730 appliance in central management mode you have to do a "policy install" to push the firewall-policy to your appliance.

But I think you are running your appliance standalone and you are using the Web-UI to manage the firewall-policy. With these configuration you don't need a "policy-install". Clicking the "apply"-button is enough.

Wolfgang

[G_W_Albrecht]

No one can run a 730 in central management mode - so this is surely the wrong corner to post the question, it should rather belong to SMB Appliances and SMP