Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
sfung
Explorer

3600 appliance R81.10 standalone

Hello,

Does the 3600 appliance support the standalone deployment?

The 3600 comes with a SSD.

According to some Check Point documentation, standalone is NOT supported with appliances using SSD.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_RN/Topics-RN/Supported-Envir...

 

Other documentations say the opposite.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

 

Thanks,

Simon

0 Kudos
10 Replies
Chris_Atkinson
Employee Employee
Employee

Yes for small deployments only.

The 3600/3800 Quantum Gateways have improved SSD compared with their earlier 2016 counterparts i.e. 3100/3200.

As I recall the previous 3100/3200 with SSD didn't include the license for standalone (local) management or at least had limitations around local logging for this reason.

CCSM R77/R80/ELITE
0 Kudos
G_W_Albrecht
Legend
Legend

The 3000 Appliances page notes that 3100 / 3200 Appliances support Security Gateway and Standalone (Gateway + Management) deployment. So surely the 3600 also supports that.

But better do not try Standalone (Gateway + Management) deployment - this usually is not suggested for a stable firewall 😎

CCSE CCTE CCSM SMB Specialist
0 Kudos
sfung
Explorer

Thank you all for the responses.

I used ISOmorphic to install the image to the appliance. I selected "Standalone" in ISOmorphic. After install, I got this error in First Time Configuration Wizard.

I will try again ..

Thanks,

SimonFirst Time Configuration Wizard Error (Standalone).png

 

0 Kudos
the_rock
Legend
Legend

The upgrade wizard shows image is there for R81.10 for 3600 appliance

Screenshot_1.png

0 Kudos
sfung
Explorer

That is the same R81.10 image that I used ..

R81.10 image.png

Here is where I specified standalone in ISOmorphic ...

ISOmorphic standalone selection.png

Installation completed without any issue. Just that when I run the First Time Configuration Wizard, it gives me that error.

Thanks,

Simon

0 Kudos
the_rock
Legend
Legend

I would honestly verify with TAC. To me, logically looking at that error, does not say its not supported, just gives a message it cannot install management part. Seems to me you did check everything correctly.

0 Kudos
PhoneBoy
Admin
Admin

You might be able to get it to install by carefully editing /etc/appliance_config.xml prior to running the FTW.
The fact it's blocking this would need to be resolved via a TAC case as it should be supported on the 3600.

0 Kudos
sfung
Explorer

I have a case opened last month and this was TAC's response ...

TAC response 1.png

Now I have asked TAC to confirm again and here is TAC's response ...

TAC response 2.png

I will reset the appliances to factory default and try the standalone install again.

Thanks,

Simon

0 Kudos
the_rock
Legend
Legend

You can certainly do so, but I have a gut feeling it may not do much...reason I say that is because all the config and file @PhoneBoy mentioned will be exactly the same. But, if that does not work, you can definitely modify the file and hopefully get it working.

0 Kudos
G_W_Albrecht
Legend
Legend

Each of the 3 standard SW packages for 3600s has NPM and LOGS Blades, and the 3600 is the successor of the 3100 - so this has to be supported...

 

CCSE CCTE CCSM SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events