- CheckMates
- :
- Products
- :
- Infinity Global Services
- :
- Playblocks
- :
- Horizon Playblocks Expert Mode Login Notification
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Horizon Playblocks Expert Mode Login Notification
Hi All,
Recently I upgraded the management server to R81.20 and receive a message regarding the "Introducing Expert mode audit log and notifications". I have some questions regarding the Horizon Playblocks Service,
1) Is it the Horizion Playblocks require license/subscription? Or is it free of charge?
2) Will I get expert shell login notification of the gateway appliance that managed by R81.20 SMS but gateway with a lower version (below R80.40)?
Regards
Justin Low
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'll add a bit more info...
- Full capabilities of Horizon Playblocks indeed require a subscription (which isn't too expensive and easy to purchase 😉).
- Having said that, we currently intend to provide the "expert login" notifications (up to a reasonable volume) without an additional license. The reasoning is that we believe it's very important that customers be aware of these occurrences.
- The notifications rely on the gateway's ability to send a new type of audit log whenever expert mode login is performed on the gateway. These audit logs were added to GAIA from R80.40 and up (starting from a certain JHF).
- The requirement for R81 on the gateway is for enforcement capabilities such as dynamically blocking external attackers that triggered a playbook by causing malicious activity.
So bottom line, we welcome all customers to connect to the cloud and activate these notifications. We're also adding some new options for better management of notifications when they come at high rates.
We also welcome you to experiment with the full Playblocks feature set during trial and make an informed decision if the value justifies a purchase.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Horizon Playblocks is available both as an individual product and as a component of Check Point Horizon´s XDR/XPR.
•Horizon Playblocks for Enterprise requires prerequisite of- Quantum Gateways and/or Harmony Endpoint and/or Quantum SD-WAN and/or Quantum IoT Protect
•Horizon Playblocks for Enterprise is an annual license.
•License quota is set according to the number of active users in the organization (Active users in Active Directory)
•Technical requirements for available data sources integration:
•Gateway mgmt. version R81.10 and above
•Quantum Gateways needs to be R81.00 and above to be enforcement point of Playblocks.
•Harmony Endpoint: could be cloud managed or on-premise.
Refer also: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Horizon-PlayBlocks-Admin-Guid...
Important Note: R80.40 is End of Life April 2024
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'll add a bit more info...
- Full capabilities of Horizon Playblocks indeed require a subscription (which isn't too expensive and easy to purchase 😉).
- Having said that, we currently intend to provide the "expert login" notifications (up to a reasonable volume) without an additional license. The reasoning is that we believe it's very important that customers be aware of these occurrences.
- The notifications rely on the gateway's ability to send a new type of audit log whenever expert mode login is performed on the gateway. These audit logs were added to GAIA from R80.40 and up (starting from a certain JHF).
- The requirement for R81 on the gateway is for enforcement capabilities such as dynamically blocking external attackers that triggered a playbook by causing malicious activity.
So bottom line, we welcome all customers to connect to the cloud and activate these notifications. We're also adding some new options for better management of notifications when they come at high rates.
We also welcome you to experiment with the full Playblocks feature set during trial and make an informed decision if the value justifies a purchase.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Tomer,
Thank you for you clarification on this. Appreciate it.
