https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144872#M6644 <P><A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk123035&amp;partition=Advanced&amp;product=Quantum" data-hasqtip="4" aria-describedby="qtip-4" target="_blank">sk123035: Application Control &amp; URL Filtering blade does not work properly on locally managed SMB appliances that deploy tag based VLANs over bridge mode</A>&nbsp;up to now told us that this limitation will be lifted in the next firmware version. And the winner is:&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk174683" target="_blank" rel="noopener">Check Point R80.20.35</A>&nbsp;!</P> Mon, 28 Mar 2022 09:50:25 GMT G_W_Albrecht 2022-03-28T09:50:25Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144872#M6644 <P><A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk123035&amp;partition=Advanced&amp;product=Quantum" data-hasqtip="4" aria-describedby="qtip-4" target="_blank">sk123035: Application Control &amp; URL Filtering blade does not work properly on locally managed SMB appliances that deploy tag based VLANs over bridge mode</A>&nbsp;up to now told us that this limitation will be lifted in the next firmware version. And the winner is:&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk174683" target="_blank" rel="noopener">Check Point R80.20.35</A>&nbsp;!</P> Mon, 28 Mar 2022 09:50:25 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144872#M6644 G_W_Albrecht 2022-03-28T09:50:25Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144875#M6645 <P>Talking about the next firmware version - I saw&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk178509" target="_self">sk178509</A> was released and then restricted (Policy installation failure on R81 SMB after uninstalling R81.10 JHF).</P> <P>Hopefully that means that the R81 release for Spark is imminent<span class="lia-unicode-emoji" title=":beaming_face_with_smiling_eyes:">😁</span></P> Mon, 28 Mar 2022 10:02:11 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144875#M6645 Ruan_Kotze 2022-03-28T10:02:11Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144880#M6646 <P>Not very - was alpha only 4 weeks ago. Adding http/2, better SSL inspection, CCP Unicast, TE + AV improvements regarding archives, file types and enhanced email inspection is a fine thing...</P> <P>But '<SPAN>after uninstalling R81.10 JHF' does not sound like SMB as you can not uninstall a firmware version, only install another firmware version over it !</SPAN></P> Mon, 28 Mar 2022 10:23:51 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144880#M6646 G_W_Albrecht 2022-03-28T10:23:51Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144885#M6647 <P>What I saw from the SK is that the R81.10 refers to the SMS managing the SMB device.</P> Mon, 28 Mar 2022 10:45:03 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144885#M6647 Ruan_Kotze 2022-03-28T10:45:03Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144899#M6648 <P>I remember opening a SR for it back then and was surprised they also decided to used my simple diagram for this SK. brings back memories..<span class="lia-unicode-emoji" title=":grinning_squinting_face:">😆</span></P> <P>Anyways, per working with this RFE I assumed this would be implemented by creating virtual interfaces on bridge for each tagged VLAN (like some other vendors do), but it turned out we create an additional network interface (away from production) and specify that interface for UserCheck redirect. <BR /><BR />Yes, this works for us.. but I was just wondering how other SMB users thought about it.<BR /><a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/21294">@G_W_Albrecht</a>&nbsp;Does it work for you?</P> Mon, 28 Mar 2022 12:45:00 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/sk123035-resolved-in-Check-Point-R80-20-35/m-p/144899#M6648 Tom_Hinoue 2022-03-28T12:45:00Z