how to install checkpoint firewall setup

Then I go back to cursing the previous engineer for using the “Install On” option when there was no need to. The logs show drops, and I scratch my head for a while, trying to figure out why.Įventually I cotton on to it, and reset it to “Policy Targets.” Re-install policy, and we’re away. Check Point doesn’t complain about a rule with “Install On” set to a firewall that’s not even in the list of installation targets.īut then the damn firewall doesn’t allow the traffic. The rule looks good - Source, Destination, Service are all set. Junior engineers keep needlessly setting it.Įvery now and then it catches me out, when I copy a rule from one policy to another. I can see all these other old rules that have it defined.” Everyone’s too scared to change it, and so these things persist for 10+ years. But most organisations have one policy defined per firewall. In that case, you can just leave the “Install On” column at its default of “Policy Targets.” There’s no need to set it to anything else, since this policy is only ever going to be installed on one firewall.īut people see that column and think “Ah, I must have to define the enforcement point. So in certain circumstances, it might make sense. This lets you define at a per-rule level, which firewall will enforce that rule. When you compile & install policy, it will only install the rules that apply to that specific firewall.

This is pretty easy to do, and might make sense if you have many common rules.īut then you say “What if I had 30 common rules, 50 that only applied to firewall A, and another 50 that only applied to firewall B?” That’s where people start using the “Install On” column. But sometimes you want to have the same policy on multiple firewalls. Most organisations will only have one installation target per policy. You can imagine the merriment that ensued when someone would install the wrong policy on a firewall. In the 4.1 days, we didn’t have this option. At install time, you had to choose from the complete list of firewalls. The default had all firewalls selected.

How to install checkpoint firewall setup