- Local User Groups
Welcome to CheckMates
Journey to the Cloud with Confidence!
Webinar: Wed 10 June @ 8am PT | 11am ET
I am Gil Shwed
Ask Me Anything!
for working from home
APT41 and Living Off The Land
Alright, we have NGFW Licensing now on the new 1500 series...
What I know from maintrain (and this chart) is that NGFW contains like - [FW, IPS, APPI, IPSec VPN, Content Awareness]
But in Locally Managed SMB... the blade settings is that we either have APPI&URLF both enabled, or only URLF enabled. So.. I'm not sure of the exact behavior we will have here.
Centrally managed is easy to understand because we can select blades individually 😛
So...if we want to use APPI, we need both APPI&URL enabled, but simply URLF wont work?
I've been looking up documents, and engaging with CP reps but.. don't have a precise answer yet.
Though the 1500 datasheet shows the same as maintrain.. URLF not included.
Is any one familiar about it?
From datasheets describing NGFW, we see it doesn't include URLF. (and I know I maybe asking something obvious...)
In locally managed mode, I assume having APPI On means URLF is also enabled... where we can't just have ONLY APPI enabled.
So does this mean that when we have NGFW license and want to use APPI, we will have both APPI/URLF enabled though URLF will not be licensed? I'm concerned as in Licensing, and system resource perspectives...
Thanks, your explanation made most of my concerns clear 🙂
Btw, from your comments I was wondering how can I distinguish between URLF categories and APPI categories tags?
(For e.g in SmartConsole, application categories shows all category tags...)
Or maybe you mean by only applications that these categories are tagged to are controllable by the policy?
"Clearly you won't be able to use categories that are entirely URL Filtering, but you should be able to use the "apps" in a given category."
Just the right answer I needed 🙂
I'm all clear now. Thanks again for your help!