topic Re: SMB Mobile Application in Spark Firewall (SMB)

SMB Mobile Application

Zachi_Schnieder — Mon, 04 Feb 2019 14:26:53 GMT

Hi All,

By the end of this week, we are planning to start an EA program of our new SMB Mobile Application (WatchTower)

Main features:

Push notifications for immediate reaction on security and network events
Easily Manage and switch between multiple security gateways with a single login
Monitor your network and security status via simplified statistic pages (Traffic, Events, etc.)
On top of the above, there are many other important features.

Restrictions:

Supports only locally managed appliances
Supported by 700/1400 only
Supported by R77.20.86 (EA firmware) and Above

If you wish to participate, please send me an Email to zachis@checkpoint.com

Thanks,

Zachi Schnieder

SMB project manager | Check Point SW Technologies

Re: SMB Mobile Application

HristoGrigorov — Mon, 04 Feb 2019 19:04:04 GMT

Is it going to be available for centrally managed units as well ?

Re: SMB Mobile Application

G_W_Albrecht — Tue, 05 Feb 2019 11:57:33 GMT

Why should that be ? I see no additional features compared to central management and SmartEvent, except the use of mobile phones...

Re: SMB Mobile Application

Zachi_Schnieder — Sat, 09 Feb 2019 10:20:38 GMT

Hi Hristo,

Currently is only for Local management units

Re: SMB Mobile Application

Zachi_Schnieder — Tue, 19 Feb 2019 13:06:29 GMT

Hi All,

By the end of this week, we are planning to start the EA program of our new SMB mobile application (WatchTower)

If you wish to participate, please send me an Email tozachis@checkpoint.com

Thanks,

Zachi Schnieder

SMB project manager | Check Point SW Technologies

Re: SMB Mobile Application

Naftali_Oziel — Sat, 02 Mar 2019 12:11:28 GMT

that's the feature value, the mobile part!

Re: SMB Mobile Application

G_W_Albrecht — Mon, 04 Mar 2019 09:09:09 GMT

Yes, that surely is a valuable feature ! In a SMB company, the CEO will now be able manage his FW from the dining table or cocktail lounge . But although you are able to block attached clients and get notified of events, you can not change policy or configuration...

Re: SMB Mobile Application

PhoneBoy — Mon, 04 Mar 2019 09:59:44 GMT

I've had a chance to play with this already.

While I echo the feedback that this would be great for centrally managed SMB units as well, I'm pretty impressed with this overall!

Definitely makes it easier for me to see what's going on at home while I'm traveling the globe to be with my CheckMates

Highly recommend getting involved in the EA if there is any interest.

Re: SMB Mobile Application

Naftali_Oziel — Mon, 04 Mar 2019 11:47:44 GMT

Thanks Dameon, I will be getting involved with EA, only concern is stability of build 823 trying to avoid a similar situation to build 701/731. Need to test in a controlled environment and not sure if it's production ready?

Re: SMB Mobile Application

G_W_Albrecht — Mon, 04 Mar 2019 11:56:13 GMT

I would not use an EA product in a production environment !

Re: SMB Mobile Application

G_W_Albrecht — Mon, 04 Mar 2019 12:00:37 GMT

I also did quick checks for my LAB SMB GW with the EA during the weekend, and i really do like the product ! What i was not able to locate is:

- Security policy configuration: remote management of your security policy via web UI.

- Simple management of multiple gateways: configure the security settings for multiple gateways.

I did not find any item connected to the current policy or configuration yet...

Re: SMB Mobile Application

Naftali_Oziel — Mon, 04 Mar 2019 12:25:45 GMT

Thanks, completely agree and my lab is currently unavailable so it makes it difficult to drive the EA. If I may ask for a favor since you're running it in a lab, do you find it to consume more memory/CPU anything out of the ordinary when using it with the app to check for status of firewall? My main concern is the resource consumption.

Re: SMB Mobile Application

Naftali_Oziel — Mon, 04 Mar 2019 12:26:52 GMT

Zachi Schnieder‌ Hi Zachi are you able to comment on this part?

Re: SMB Mobile Application

G_W_Albrecht — Mon, 04 Mar 2019 12:55:07 GMT

I can not see that as my LAB unit is usually not under load and i have no longer-term RAM/CPU history graph that would be able to show that. All i did check was the App itself and the blocking functionality.

Re: SMB Mobile Application

Naftali_Oziel — Mon, 04 Mar 2019 14:14:22 GMT

Ok thank you

Re: SMB Mobile Application

Naftali_Oziel — Mon, 04 Mar 2019 14:15:50 GMT

Instructions from Zachi

In case upgrade was performed from R77.20.85 firmware to the new one (R77.20.86), please follow the instructions below and make sure the relevant parameters are updated as required:

In your WebUI, go to Device->Advanced Settings page:
1. Search for “Mobile Settings - Notification cloud server URL” and set it to https://smbcloud-dev-api-gateway.kube1.iaas.checkpoint.com/notifications/mobile/send

2. Search for “Admin Lockout – Mobile application session timeout” and set it to 30

Re: SMB Mobile Application

G_W_Albrecht — Tue, 05 Mar 2019 08:15:03 GMT

Apart from the fact that i did follow these instructions - why did you include that here ? We will hope that for one, the default of the GA App will be correct and two, that better installation instructions will be provided,

Re: SMB Mobile Application

Naftali_Oziel — Tue, 05 Mar 2019 10:31:56 GMT

Why not? is this not a forum for EA and exchange of information? The "don't shoot the messenger" applies. Simply forwarded instructions provided to me for the EA. yes agree, and hope while not a strategy that GA will not require any tuning of such kind.

Re: SMB Mobile Application

G_W_Albrecht — Tue, 05 Mar 2019 10:48:39 GMT

The cited proverb means making the messenger responsible for the bad news he brings, but you have brought us no news at all ! As everybody taking part in the EA testing has already received these instructions, this is rather only a space-consuming non-message, as nobody will profit by duplicating the instructions that have been forwarded to all participants already...

Re: SMB Mobile Application

Naftali_Oziel — Tue, 05 Mar 2019 11:31:09 GMT

Have a great day! Glad the news I brought you was not interpreted to be bad news....