SmartCenter server reachable via public IP addresses

Advanced search

[CPbier]

To be able to manage a firewall node over the Internet from a HA mgmt station with a private IP, Check Point recommends to:
- Create a new Check Point object and enable "Log Server" and "Secondary SmartCenter Server" and assign it with a public routable IP address.
- Assign the new Check Point object to the cluster as a master and log server.
- Do NAT on the perimeter firewall.

If all that is done I can see that the primary SmartCenter server sends a lot of traffic towards the 'dummy'  SmartCenter servers. I don't like this! Is there another way to do this or get rid of the traffic?

It would be nice if a customer management add-on had more than 1 IP address defined just like the topology of a firewall module.

[juve]

you can use automatic nat or manually arrange for the natting to be in order on all firewalls (this may take some time analysing what goes where and needs to be translated into what).

• Articles
• Knowledge base