topic Re: Synchronising a permitted URL list between Harmony Connect and Checkpoint R81.20 ? in SASE and Remote Access

Synchronising a permitted URL list between Harmony Connect and Checkpoint R81.20 ?

championc1 — Thu, 14 Dec 2023 12:43:22 GMT

Is it possible to create and use a single central Dynamic List of Whitelisted URL's, so that on LAN and Remote Access for users is identical ?

This could either be via a Dynamic List accessible to both, or whether either Harmony Connect or Checkpoint R81.20 can share a list with the other device

Re: Synchronising a permitted URL list between Harmony Connect and Checkpoint R81.20 ?

Chris_Atkinson — Fri, 15 Dec 2023 00:20:50 GMT

Are you managing the policy via SmartConsole today or separately?

Note: "This solution supports securing branch offices going to the Internet. Securing remote users using Harmony Connect Agent is not supported. Securing branch offices or remote users going to corporate applications is not supported."

Refer: https://support.checkpoint.com/results/sk/sk156632

Re: Synchronising a permitted URL list between Harmony Connect and Checkpoint R81.20 ?

Chris_Atkinson — Fri, 15 Dec 2023 00:54:26 GMT

Perhaps you could attempt to use the APIs to drive this:

https://app.swaggerhub.com/apis-docs/Check-Point/harmony-connect-api/3.0.0

Re: Synchronising a permitted URL list between Harmony Connect and Checkpoint R81.20 ?

championc1 — Fri, 15 Dec 2023 09:40:12 GMT

Thanks for that

While R81.20 now supports Dynamic IP lists (mainly for Blocking of emerging threats), is there any possibility now (or anything planned for the future) to facilitate a Dynamic URL list ?

Re: Synchronising a permitted URL list between Harmony Connect and Checkpoint R81.20 ?

PhoneBoy — Fri, 15 Dec 2023 18:37:21 GMT

In R81.20, you can do this via a Network Feed: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuide/Content/Topics-SECMG/Network_Feed.htm
Not sure if Harmony Connect gateways support this feature or not, which would be possible to leverage (in theory) with unified policy management: https://support.checkpoint.com/results/sk/sk156632

No new features or functionality is planned for Harmony Connect as it is End of Sale: https://support.checkpoint.com/results/sk/sk181531