Below is example from my lab. Keep in mind...IF you have custom config there already and you press "get WITH topology" that will overwrite whatever is there. I always do "get interfaces without topology" and select option for routing for anti-spoofing, as thats how fw would calculate any changes and policy push is not even needed in that case. Just ensure you have correct routes configured, that sort of goes without saying : - )
I can show you in my lab if you have more questions.
Andy
Interface - Topology Settings (checkpoint.com)

