Q&A to be provided below the video:
Will Check Point's SD-WAN include WAN acceleration at any point?
On the Roadmap
What about support for Maestro and VSX?
Not at present, but both are planned.
Does Quantum SDWAN support Open Servers?
Yes
Is it required to use Infinity Portal to manage SD-WAN functionality?
Yes. We are looking at options that do not require Infinity Portal for the roadmap.
What level of impact will SD-WAN blade have on utilization/performance on gateways currently deployed?
If NGTP/SNBT blades are already used, the impact should be minimal.
Is SD-WAN supported by DAIP Gateway?
Yes
When will SD-WAN be supported by SMB local managed gateways?
This is planned for R81.10.10 with a current ETA of end of year 2023.
Is there a limit on the number of vpn tunnels, being full mesh or hub-spoke?
250 at present and we are looking to expand this.
Why does Gaia OS require a Nano Agent to be deployed?
This agent was not included in the original Gaia OS release. It is also updated independently of the rest of Gaia.
The cloud part of SD-WAN involves only the control-path and data-path is peer-to-peer only? Or the cloud can participate on data-path?
Only the control path is currently in the cloud. With Quantum SASE, it will also be possible to use the cloud for the data path as well.
Does Check Point have a complete SASE solution?
With Quantum SASE, yes.
What are the pros/cons of SDWAN vs IPSEC VPN?
SD-WAN can leverage IPsec VPNs as part of what it does.
Is Check Point SD-WAN is On-Premises [Hardware/Chassis] or a software license?
It's an add-on to your existing hardware/software license.
What about supporting dynamic IP support for HA (Not standalone) for Enterprise Gateways and Spark Gateways?
ClusterXL does not support dynamically-assigned cluster addresses. This may be addressed with other technologies in the future. If you have a specific requirement for this, please reach out to your local Check Point office.
What does this integration with Perimeter 81 mean for Harmony Connect?
At the same time Quantum SASE was announced, we announced the End of Sale for Harmony Connect.
Does a branch gateway need a public IP or can it be behind eg a typical commodity 5G router?
A branch gateway does not require a public IP.
Licensing instructions state the App Control, URLF and IPSec VPN blades are required.
Quantum SD-WAN leverages the existing capabilities of a Check Point security gateway. If you use VPNs or choose to steer by applications instead of simple services, then the underlying gateway must be licensed for these features with Quantum SD-WAN. Otherwise, these licenses are not strictly required.
Is IPV6 over SD-WAN a prioritized feature?
This is on the roadmap.
Does Check Point has SASE PoPs available or the security inspection is only possible at the branches at this point?
Yes, as part of Quantum SASE.
Will ISP Redundancy still be supported or will this disappear because of SD-WAN?
It will still be supported.
