Use Checkpoint SMB as Layer 2 Brdige to block traffic

[MTS]

Hi all,

Is me again. 

I am trying to deploy the SMB as a bridge to project my network as a first-tier layer.

The design is like this:

SMB uses Wan port to update UTM, Lan 3 and 4 are layer 2 and the connection like this:

The UTM feature on Fortigate is disabled already.

We find that:

IF both Lan 3 and 4 are under the same bridge, the UTM is NOT working.

IF both Lan 3 and 4 are under the same switch, the UTM is NOT working.

If we assign Lan 4 and 5 as one switch first, then assign the switch and Lan3 as the same bridge, the UTM is working now.

I wonder: why the hell with this design make things work?

[PhoneBoy]

This option needs to be enabled (it's not by default):

[MTS]

So the Bridge mode will work with UTM after I enable this?

And that does not mean SSL inspection, right?

[PhoneBoy]

Any "UTM" features will require this feature to be enabled where two LAN interfaces are used.
SSL Inspection would have to be configured separately (if applicable).