I want to use PBR function based on Domain in checkpoint

ChoiYunSoo — Thu, 06 Jul 2023 02:27:05 GMT

I recently had a meeting with a customer and received inquiries and requests about whether CheckPoint supports the domain-based PBR function.

So I checked 'sk167135' and ran an test and I got a positive result.

However, since the SK document I saw requires enabling the hidden function, I am concerned that it will affect firewall performance and other functions.

Can you tell us about the cases or problems of using the above SK in actual customers?

The simple configuration and the test I conducted referring to the SK document are as follows

1. Enable hidden features

--> Possible to set PBR based on firewall rule number

2. Set FQDN policy in Smart Console and install policy

3. PBR setting based on rule number

4. Based on the figure below, general external communication is set to flow to ISP No. 1, and traffic matching the domain-based PBR rule flows to ISP No. 2, and I have confirmed that it operates normally.

Re: I want to use PBR function based on Domain in checkpoint

Chris_Atkinson — Thu, 06 Jul 2023 02:40:23 GMT

Caveats are documented in sk167135.

Other customers may opt to explore Quantum SD-WAN (sk180605) depending on their use cases.

topic I want to use PBR function based on Domain in checkpoint in Firewall and Security Management

I want to use PBR function based on Domain in checkpoint

Re: I want to use PBR function based on Domain in checkpoint