topic Re: Encryption of connections originating from Centrally managed SMB in Spark Firewall (SMB) https://community.checkpoint.com/t5/Spark-Firewall-SMB/Encryption-of-connections-originating-from-Centrally-managed-SMB/m-p/14217#M347 <HTML><HEAD></HEAD><BODY><P>A "Why" question is placed wrongly here - and y<SPAN style="color: #333333; background-color: #ffffff;">ou can always issue an RFE in<SPAN>&nbsp;</SPAN></SPAN><A href="https://www.checkpoint.com/rfe/rfe.htm" rel="nofollow" style="color: #6d6e71; background-color: #ffffff; border: 0px; text-decoration: none; padding: 0px calc(12px + 0.35ex) 0px 0px;">Products and Feature Suggestions</A><SPAN style="color: #333333; background-color: #ffffff;">.&nbsp;</SPAN></P></BODY></HTML> Mon, 10 Dec 2018 11:03:58 GMT G_W_Albrecht 2018-12-10T11:03:58Z Encryption of connections originating from Centrally managed SMB https://community.checkpoint.com/t5/Spark-Firewall-SMB/Encryption-of-connections-originating-from-Centrally-managed-SMB/m-p/14216#M346 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>The question is mostly for relevant Checkpoint employees, but&nbsp;other's comments and suggestions are welcome as well.</P><P>Why "Do not encrypt connections originating from the local gateway" is available only for the Locally managed SMBs, and is not available for the ones managed Centrally?</P><P>When there are many tens of the Centrally managed SMBs,&nbsp;it gets cumbersome to maintain the crypt.def file, especially when SMB's WAN address is dynamically assigned.</P></BODY></HTML> Sat, 08 Dec 2018 15:13:08 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Encryption-of-connections-originating-from-Centrally-managed-SMB/m-p/14216#M346 Maxim_Mogorean 2018-12-08T15:13:08Z Re: Encryption of connections originating from Centrally managed SMB https://community.checkpoint.com/t5/Spark-Firewall-SMB/Encryption-of-connections-originating-from-Centrally-managed-SMB/m-p/14217#M347 <HTML><HEAD></HEAD><BODY><P>A "Why" question is placed wrongly here - and y<SPAN style="color: #333333; background-color: #ffffff;">ou can always issue an RFE in<SPAN>&nbsp;</SPAN></SPAN><A href="https://www.checkpoint.com/rfe/rfe.htm" rel="nofollow" style="color: #6d6e71; background-color: #ffffff; border: 0px; text-decoration: none; padding: 0px calc(12px + 0.35ex) 0px 0px;">Products and Feature Suggestions</A><SPAN style="color: #333333; background-color: #ffffff;">.&nbsp;</SPAN></P></BODY></HTML> Mon, 10 Dec 2018 11:03:58 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Encryption-of-connections-originating-from-Centrally-managed-SMB/m-p/14217#M347 G_W_Albrecht 2018-12-10T11:03:58Z Re: Encryption of connections originating from Centrally managed SMB https://community.checkpoint.com/t5/Spark-Firewall-SMB/Encryption-of-connections-originating-from-Centrally-managed-SMB/m-p/14218#M348 <HTML><HEAD></HEAD><BODY><P>Following&nbsp;sk116097, an alternative is to use VTI instead of Domain-Based VPN.</P></BODY></HTML> Mon, 10 Dec 2018 12:13:48 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Encryption-of-connections-originating-from-Centrally-managed-SMB/m-p/14218#M348 G_W_Albrecht 2018-12-10T12:13:48Z