SMB 1575 blades greyed out

[Moudar]

Hi

I got this new 1575 appliance and now with 30 days license, all blades are greyed out except for firewall blade.

The appliance has been successfully added to Smart Management Server (SMS) using a dynamic IP address.

Our goal is to configure this appliance to function solely as a VPN Gateway. This means all traffic will be routed through a VPN tunnel to a central office where it will be subjected to policy enforcement.

Can you please advise on how to implement this setup?"

[PhoneBoy]

Is the 1575 managed by the SMS or has been added as an external object?
If centrally managed, all of the configuration is done there: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Con...
If locally managed, then you will also need to perform configurations here: https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/Conf...
"Route all traffic" is a supported configuration in either case.

[Moudar]

1575 is managed by the SMS (centrally managed).

If the central office has more blades enabled than the branch office, and we need to use the 'Star community – To center or through the center to other satellites, to Internet and other VPN targets' option, how can we install the same policy rule? Do we need to create a new policy specifically for the branch office?

Or maybe we don't need to install the same policy on branch office? Only 2-3 rules to send the traffic through the VPN?!

[the_rock]

That would explain blades "behavior". As far as rules, you can apply same policy, should not be an issue.

[PhoneBoy]

You'll probably want to install a different policy package on the branch office with just the rules you need.