What services are needed for Smartdashboard to connect Nokia box?

[jordi]

Hi all,

Before i push the policy to nokia, i already included some Checkpoint protocols in order to access nokia from management server. However, after push, i can't connect to nokia from management server via smardashboard any more. Can anyone suggest what services are needed for this type of connection?

Thanks.

Best regards!

Jordi

[Porter]

do you have the implied rules disabled?

[zyz101z]

When you say access, are you talking about just pushing policy? Or are you talking about ssh and https? Typically thats the only access you need to the nokia box to manage it directly. If your just talking about checkpoint ports, than as mentioned, probably better to use implied. Another thing to watch out for is when you push it will put on your anti spoofing policy. So even if you have the implied rules on, if you dont have your anti-spoofing correctly configured you could be getting dropped. That should all be logging though. If your firewall isn't even logging then you could ssh in and do a fw ctl zdebug + drop > drop.txt and check for drops that way.