Encryption of connections originating from Centrally managed SMB

[Maxim_Mogorean]

Hi,

The question is mostly for relevant Checkpoint employees, but other's comments and suggestions are welcome as well.

Why "Do not encrypt connections originating from the local gateway" is available only for the Locally managed SMBs, and is not available for the ones managed Centrally?

When there are many tens of the Centrally managed SMBs, it gets cumbersome to maintain the crypt.def file, especially when SMB's WAN address is dynamically assigned.

[G_W_Albrecht]

A "Why" question is placed wrongly here - and you can always issue an RFE in Products and Feature Suggestions. 

[G_W_Albrecht]

Following sk116097, an alternative is to use VTI instead of Domain-Based VPN.