3600 appliance R81.10 standalone

[sfung]

Hello,

Does the 3600 appliance support the standalone deployment?

The 3600 comes with a SSD.

According to some Check Point documentation, standalone is NOT supported with appliances using SSD.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RN/Topics-RN/Supported-Envir...

Other documentations say the opposite.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Thanks,

Simon

[Chris_Atkinson]

Yes for small deployments only.

The 3600/3800 Quantum Gateways have improved SSD compared with their earlier 2016 counterparts i.e. 3100/3200.

As I recall the previous 3100/3200 with SSD didn't include the license for standalone (local) management or at least had limitations around local logging for this reason.

[G_W_Albrecht]

The 3000 Appliances page notes that 3100 / 3200 Appliances support Security Gateway and Standalone (Gateway + Management) deployment. So surely the 3600 also supports that.

But better do not try Standalone (Gateway + Management) deployment - this usually is not suggested for a stable firewall 8)

[sfung]

Thank you all for the responses.

I used ISOmorphic to install the image to the appliance. I selected "Standalone" in ISOmorphic. After install, I got this error in First Time Configuration Wizard.

I will try again ..

Thanks,

Simon

[the_rock]

The upgrade wizard shows image is there for R81.10 for 3600 appliance

 

[sfung]

That is the same R81.10 image that I used ..

Here is where I specified standalone in ISOmorphic ...

Installation completed without any issue. Just that when I run the First Time Configuration Wizard, it gives me that error.

Thanks,

Simon

[the_rock]

I would honestly verify with TAC. To me, logically looking at that error, does not say its not supported, just gives a message it cannot install management part. Seems to me you did check everything correctly.

[PhoneBoy]

You might be able to get it to install by carefully editing /etc/appliance_config.xml prior to running the FTW.
The fact it's blocking this would need to be resolved via a TAC case as it should be supported on the 3600.

[sfung]

I have a case opened last month and this was TAC's response ...

Now I have asked TAC to confirm again and here is TAC's response ...

I will reset the appliances to factory default and try the standalone install again.

Thanks,

Simon

[the_rock]

You can certainly do so, but I have a gut feeling it may not do much...reason I say that is because all the config and file @PhoneBoy mentioned will be exactly the same. But, if that does not work, you can definitely modify the file and hopefully get it working.

[G_W_Albrecht]

Each of the 3 standard SW packages for 3600s has NPM and LOGS Blades, and the 3600 is the successor of the 3100 - so this has to be supported...