Solved: Re: R80 IPS deployment

Nirish_Nair · ‎2017-06-26

Do we have a provision in R80 where we may separate IPS and Firewall rule base deployment- so that If I make change on IPS and if I don’t wish those IPS changes to be deployed on firewall module- I can hold that but still deploy firewall rule base changes?

is this possible in R80 management server?

PhoneBoy · ‎2017-06-26

Irrespective of whether you are using R80+ for management, the following rules apply:

For R77.x Gateways and earlier, Firewall and IPS policy must be pushed together.
For R80.10 Gateways and above, the IPS is treated as apart of the Threat Prevention layer and can be deployed separately from the Access Policy (Firewall).

View solution in original post

PhoneBoy · ‎2017-06-26

Irrespective of whether you are using R80+ for management, the following rules apply:

For R77.x Gateways and earlier, Firewall and IPS policy must be pushed together.
For R80.10 Gateways and above, the IPS is treated as apart of the Threat Prevention layer and can be deployed separately from the Access Policy (Firewall).

Tomer_Sole · ‎2017-06-27

see the "sister thread" https://community.checkpoint.com/thread/5226?sr=inbox

Are you a member of CheckMates?

R80 IPS deployment