About new feature update of R80.40

[Jeff_Gao]

I'm Posting this post in hopes of adding new features. I also want to know if checkpoint will updates new features.

1.About QOS,if checkpoint will add the feature about per ip qos limit in a policy like fortinet;

2.Now,others vendor like fortinet/paloalto and so on all support ldap authen when login device,if checkpoint will add ldap authen feature when login smartconsole or web/cli.

Others feature are welcome raisied.

[_Val_]

You can use Radius or SecurID to authenticate admin users 

[Benedikt_Weissl]

What do you mean by "per ip qos limit in a policy like fortinet"?

[Jeff_Gao]

[Benedikt_Weissl]

I see. You can already limit up/download in the access policy but you want to be able to apply this limit per source ip, right?

[_Val_]

...which is already possible in any Check Point from 5.0 and up.

[Jeff_Gao]

yes,precisely,when source is B or C class network in a policy ,I want to limit per source ip

[_Val_]

Concerning QoS limit per IP, you can also do that in the QoS rulebase.

So why are you calling "new features" something that exists for many years?

[Jeff_Gao]

source is a network,how to limit per ip in a policy? According to my test,this network share the total limit bw in a policy

[_Val_]

Incorrect. You can create a rule, where source is a host object, or a group of those. 

[Jeff_Gao]

When there are only a few hosts, source can is a host object,if a c class network and i need shaper traffic for per ip to 1M,how to do it ,need i create 254 rulebase and 254 host objects？

[_Val_]

This depends on your needs. If you want a granular policy with limit per IP, then yes. It makes much more sense to use simpler settings in most of the policies, though

[Chris_Atkinson]

Hi Jeff,

Your question about LDAP was addressed previously here, did you ask your local SE for assistance?

https://community.checkpoint.com/t5/General-Management-Topics/Multi-domain-Admin-user-authentication...

[Jeff_Gao]

Yaelle_Harel said that we should contact solution center to activate it,how to contact solution center?

[Chris_Atkinson]

Hi Jeff,
As above your local SE should be able to facilitate.

(Refer also sk145392)

Thanks.