How to limit some administrators to specific devices only in MDS environment

[Andrew-OCD]

Dear Check Mates,

My customer would like to provide read-only access for some site administrators to only the gateways on their site.

We are running an R81.10 T94 MDSM with multiple domains.

I can see how to use the domain level profile but I can not see if it is possible to limit an administrator to a set of Gateways within the domain.

Andy ideas/suggestions or further reading would be greatly appreciated.

Andrew

[PhoneBoy · Accepted solution]

Normally, we suggest using Multi-Domain to provide the appropriate separation.
If you want this within the same domain (or without Multi-Domain), this is not functionality we have today.
If an RFE is needed, it should be discussed with your local Check Point office.

[the_rock]

I know TAC guy in Dallas told me once they do have people in management team who specialize in MDS, so might be worth opening a case and inquiring about it...just an idea.

Andy

[Andrew-OCD]

Thanks for the suggestion.

I opened a TAC case and they said go back to local contacts as they only deal with problems rather than such questions.