topic Re: About new feature update of R80.40 in General Topics

About new feature update of R80.40

Jeff_Gao — Fri, 27 Dec 2019 11:18:02 GMT

I'm Posting this post in hopes of adding new features. I also want to know if checkpoint will updates new features.

1.About QOS,if checkpoint will add the feature about per ip qos limit in a policy like fortinet;

2.Now,others vendor like fortinet/paloalto and so on all support ldap authen when login device,if checkpoint will add ldap authen feature when login smartconsole or web/cli.

Others feature are welcome raisied.

Re: About new feature update of R80.40

_Val_ — Fri, 27 Dec 2019 11:53:55 GMT

You can use Radius or SecurID to authenticate admin users

Re: About new feature update of R80.40

Benedikt_Weissl — Fri, 27 Dec 2019 12:12:24 GMT

What do you mean by "per ip qos limit in a policy like fortinet"?

Re: About new feature update of R80.40

_Val_ — Fri, 27 Dec 2019 12:21:53 GMT

Concerning QoS limit per IP, you can also do that in the QoS rulebase.

So why are you calling "new features" something that exists for many years?

Re: About new feature update of R80.40

Jeff_Gao — Fri, 27 Dec 2019 12:25:52 GMT

source is a network,how to limit per ip in a policy? According to my test,this network share the total limit bw in a policy

Re: About new feature update of R80.40

Jeff_Gao — Fri, 27 Dec 2019 12:32:14 GMT

Re: About new feature update of R80.40

_Val_ — Fri, 27 Dec 2019 12:39:15 GMT

Incorrect. You can create a rule, where source is a host object, or a group of those.

Re: About new feature update of R80.40

Benedikt_Weissl — Fri, 27 Dec 2019 12:40:38 GMT

I see. You can already limit up/download in the access policy but you want to be able to apply this limit per source ip, right?

Re: About new feature update of R80.40

Jeff_Gao — Fri, 27 Dec 2019 12:47:33 GMT

When there are only a few hosts, source can is a host object,if a c class network and i need shaper traffic for per ip to 1M,how to do it ,need i create 254 rulebase and 254 host objects？

Re: About new feature update of R80.40

_Val_ — Fri, 27 Dec 2019 13:08:58 GMT

This depends on your needs. If you want a granular policy with limit per IP, then yes. It makes much more sense to use simpler settings in most of the policies, though

Re: About new feature update of R80.40

_Val_ — Fri, 27 Dec 2019 13:11:26 GMT

...which is already possible in any Check Point from 5.0 and up.

Re: About new feature update of R80.40

Jeff_Gao — Fri, 27 Dec 2019 14:06:02 GMT

yes,precisely,when source is B or C class network in a policy ,I want to limit per source ip

Re: About new feature update of R80.40

Chris_Atkinson — Fri, 27 Dec 2019 14:17:49 GMT

Hi Jeff,

Your question about LDAP was addressed previously here, did you ask your local SE for assistance?

https://community.checkpoint.com/t5/General-Management-Topics/Multi-domain-Admin-user-authentication-to-AD/td-p/23420

Re: About new feature update of R80.40

Jeff_Gao — Sun, 29 Dec 2019 13:39:19 GMT

Yaelle_Harel said that we should contact solution center to activate it,how to contact solution center?

Re: About new feature update of R80.40

Chris_Atkinson — Sat, 04 Jan 2020 11:04:40 GMT

Hi Jeff,
As above your local SE should be able to facilitate.

(Refer also sk145392)

Thanks.