https://community.checkpoint.com/t5/Firewall-and-Security-Management/Sandblast-Agents-and-Check-Point-firewall-Design/m-p/100945#M7874 <P>Hello Team,</P><P>&nbsp;</P><P>On the edge is silver peak (for sdwan) and zscaler( for vpn, secure web traffic,dlp). These solutions are from another partner.<BR />At the core of the network&nbsp; is a CP firewall with sandblast subscription package. We are proposing sandblast agent standard for endpoints. Now, should the endpoints with sandblast agents have their gateways defined on the core firewall vs on the silver peak?<BR />Is additional inspection from the CP firewalls recommended? What are the gains to having/not having the gateway on the firewalls?</P> Mon, 02 Nov 2020 21:51:45 GMT yahniqueb 2020-11-02T21:51:45Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Sandblast-Agents-and-Check-Point-firewall-Design/m-p/100945#M7874 <P>Hello Team,</P><P>&nbsp;</P><P>On the edge is silver peak (for sdwan) and zscaler( for vpn, secure web traffic,dlp). These solutions are from another partner.<BR />At the core of the network&nbsp; is a CP firewall with sandblast subscription package. We are proposing sandblast agent standard for endpoints. Now, should the endpoints with sandblast agents have their gateways defined on the core firewall vs on the silver peak?<BR />Is additional inspection from the CP firewalls recommended? What are the gains to having/not having the gateway on the firewalls?</P> Mon, 02 Nov 2020 21:51:45 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Sandblast-Agents-and-Check-Point-firewall-Design/m-p/100945#M7874 yahniqueb 2020-11-02T21:51:45Z