Location Awareness Endpoint Firewall

[Daniel_Hainich]

Hi,

is there any option to configure endpoint firewall policy based on location?

when connected inside company disable fw, and when outside use default profile?

if not, how i can configure that my users cant access internet if vpn is not established?

thanks

daniel

[Chris_Atkinson]

Review the Disconnected policy rules for the blade to see if it suits your requirements...

For more information please refer to the "Creating New Policy Rules" & "Enforcing Rules According to States" sections of the admin guide.

https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_EndpointSecurity_AdminGui...

[Daniel_Hainich]

Hi Chris,

this helped. thanks a lot.
is it possible to proof the availability of other ressources like domain-controller or something else instead management?

[PhoneBoy]

It's actually connectivity to the gateway via an internal interface that's the default.
But yes, you can configure it.

[Daniel_Hainich]

Hello Dameon,

i thinks thats the Settings for VPN. Is it also for Endpoint-Firewall?

Daniel

[John_Gallagher]

Hi,

How would you achieve this if you were running EndPoint in the cloud as the client will always be connected?

[PhoneBoy]

It should still be relevant if you're using Check Point's VPN client to remotely connect.
Otherwise it's not.