managing multiple interfaces on edge using smart center

[krisiasty]

Hello

We have a couple of Edge XU boxes with 6.x firmware. There are 2-4 per-port vlans defined on them with different subnets. The boxes are managed by our R61 Smart Center Server, but we are unable to define those vlans / subnets in edge object properties - the GUI allows to define only addresses for LAN, DMZ and WAN (always with subnet mask 255.255.255.255 - why?).
The question is: are vlans unsupported on centrally managed edge boxes or there is any special procedure to define them in GUI?

[chillyjim]

Supported, yes, but you cannot define them in the topology of the Edge Device's object.

Edge/Embeded Check Point features seem to always be ahed of the GUI.

[krisiasty]

Originally Posted by chillyjim

Supported, yes, but you cannot define them in the topology of the Edge Device's object.

By 'supported' do you mean that if I know there are four per-port vlans defined on the Edge (ex. 10.0.1.0/24, 10.0.2.0/24, 10.0.3.0/24 and 10.0.4.0/24) I can create rules which permits or blocks traffic between them and it will be enforced properly?

Are there any known plans to add multiple interface support on Edge boxes to SmartCener Server / GUI ?

[melipla]

I wish, from what I understand there are only 3 interfaces (WAN,DMZ,LAN) & they're all in the encryption domain for the edge device. The 4 LAN interfaces share the same MAC address, so you're limited on how you use them. When I asked the tech about it he suggested that the 7.0 firmware would make the encryption domain configurable, so I then asked him when it'd be released and if I could manage pvlans from the management server w/the 7.0 firmware and this is the response I got:

"I do not know when the 7.0 code will be released, the last time frame that I've heard was in the Fall of this year. From what I've heard so far from Sofaware, those issues that you asked about are being addressed in the new code. I have a conference call with Sofaware tomorrow morning, and I will see if I can get any more info on this for you."

He never got back to me & my ticket was automatically closed....not a good sign.