R80.20.10 Advanced Settings

[G_W_Albrecht]

There has been a couple of changes in R80.20.10 Advanced Settings for locally managed 1500 appliances.

Additional parameters:

Administrators RADIUS authentication - Default Shell   options Clish  Default shell for super administrators. To enable this feature please contact Check Point support.

Application Control and URL Filtering - Non-standard HTTP ports   bool true  Enable HTTP inspection on non-standard ports for the Application Control or URLF blade

IP Resolving - IP Resolving Activation  options Disabled  Enable / Disable IP Resolving logs enrichment

IP Resolving - IP Resolving TTL  int 1800  The time (in seconds) for which the hostname resolution will be used

Report Settings - Reports cloud server URL  urlv6https://smbcloud-api-gateway.iaas.checkpoint.com/reports/pdfReports  cloud server URL used to generate report PDF

Some parameters have been replaced:

Streaming engine settings - Stream Inspection Timeout action options Prevent Stream Inspection Timeout activation mode

Streaming engine settings - Stream Inspection Timeout trackingoptionsLog

Streaming engine settings - TCP Invalid Checksum action options Prevent TCP Invalid Checksum activation mode

Streaming engine settings - TCP Invalid Checksum trackingoptionsNone

Streaming engine settings - TCP Invalid Retransmission action options Prevent TCP Invalid Retransmission activation mode

Streaming engine settings - TCP Invalid Retransmission trackingoptionsLog

Streaming engine settings - TCP Out of Sequence action options Prevent TCP Out of Sequence activation mode

Streaming engine settings - TCP Out of Sequence trackingoptionsNone

Streaming engine settings - TCP SYN Modified Retransmission action options Prevent TCP SYN Modified Retransmission activation mode

Streaming engine settings - TCP SYN Modified Retransmission trackingoptionsLog

Streaming engine settings - TCP Segment Limit Enforcement action options Prevent TCP Segment Limit Enforcement activation mode

Streaming engine settings - TCP Segment Limit Enforcement trackingoptionsLog

Streaming engine settings - TCP Urgent Data Enforcement action options Prevent TCP Urgent Data Enforcement activation mode

Streaming engine settings - TCP Urgent Data Enforcement trackingoptionsLog

By:

Streaming engine settings - Stream Inspection Timeout actionoptionsPreventStream Inspection Timeout activation mode

Streaming engine settings - TCP Out of Sequence trackingoptionsNone

Streaming engine settings - TCP SYN Modified Retransmission actionoptionsPreventTCP SYN Modified Retransmission activation mode

Streaming engine settings - TCP SYN Modified Retransmission trackingoptionsLog

Streaming engine settings - TCP Segment Limit Enforcement actionoptionsPreventTCP Segment Limit Enforcement activation mode

Streaming engine settings - TCP Segment Limit Enforcement trackingoptionsLog

Streaming engine settings - TCP Urgent Data Enforcement actionoptionsDetectTCP Urgent Data Enforcement activation mode

Streaming engine settings - TCP Urgent Data Enforcement trackingoptionsNone

Some parameters have been deleted:

Serial port - Flow control options RTS/CTS Indicates the method of data flow control to and from the serial port

Serial port - Mode options Console Indicates if the serial port is used to connect to the appliance's console, a remote telnet server or allow a remote telnet connection to the device connected to the serial port.

Unified Threat Prevention policy - Block when service is unavailable bool false Block web requests traffic when the Check Point ThreatCloud online web service is unavailable

Unified Threat Prevention policy - Fail mode options Allow all requests Indicates the action to take on traffic in case of an internal system error or overload

I would be glad to receive any comments, corrections or additions...