Check Point R80.20 - Page 41

Mirror and Decrypt
Next Generation Security Gateway Guide R80.20 | 41
Step
Description
5 From the top toolbar, click Update (or press Ctrl+S) to save the changes in the
database.
6 Close the SmartDashboard.
Define the designated physical interface as VLAN Trunk:
Step Description
1 In SmartConsole, open the object of the VSX Gateway, or VSX Cluster.
2 From the navigation tree, click Physical Interfaces.
3 Check the box VLAN Trunk near the designated physical interface.
4 Click OK.
To add the designated physical interface in the object of each Virtual System:
Step Description
1 In SmartConsole, open the Virtual System object.
2 From the navigation tree, click Topology.
3 From the top toolbar, click New > Regular.
4 On the General tab:
1.
In the Interface field, select the designated physical interface that you defined as
VLAN Trunk.
2.
In the VLAN Tag field, enter or select a VLAN ID.
3.
In the IPv4 Configuration section:
• In the IP Address field, enter a dummy IP address.
• In the Net Mask field, enter the applicable net mask.
Important - This IP address cannot collide with other IP addresses used in your
environment. This IP address cannot belong to subnets used in your environment.
Make sure to configure the correct subnet mask. After you enable traffic mirroring
on this interface in SmartConsole, all other traffic that is routed to this interface is
dropped.
4.
Do not check the Propagate route to adjacent Virtual Devices (IPv4).
5.
In the MTU field, enter the applicable MTU. See Mirror and Decrypt Requirements
(on page
24).
6.
In the Security Zone field, leave the default None.
7.
Click OK.
To activate the Mirror and Decrypt in the object of each Virtual System:
Step
Description
1 In SmartConsole, open the Virtual System object.