sk123035 resolved in Check Point R80.20.35 !

[G_W_Albrecht]

sk123035: Application Control & URL Filtering blade does not work properly on locally managed SMB ap... up to now told us that this limitation will be lifted in the next firmware version. And the winner is: Check Point R80.20.35 !

[Ruan_Kotze]

Talking about the next firmware version - I saw sk178509 was released and then restricted (Policy installation failure on R81 SMB after uninstalling R81.10 JHF).

Hopefully that means that the R81 release for Spark is imminent😁

[G_W_Albrecht]

Not very - was alpha only 4 weeks ago. Adding http/2, better SSL inspection, CCP Unicast, TE + AV improvements regarding archives, file types and enhanced email inspection is a fine thing...

But 'after uninstalling R81.10 JHF' does not sound like SMB as you can not uninstall a firmware version, only install another firmware version over it !

[Ruan_Kotze]

What I saw from the SK is that the R81.10 refers to the SMS managing the SMB device.

[Tom_Hinoue]

I remember opening a SR for it back then and was surprised they also decided to used my simple diagram for this SK. brings back memories..😆

Anyways, per working with this RFE I assumed this would be implemented by creating virtual interfaces on bridge for each tagged VLAN (like some other vendors do), but it turned out we create an additional network interface (away from production) and specify that interface for UserCheck redirect.

Yes, this works for us.. but I was just wondering how other SMB users thought about it.
@G_W_Albrecht Does it work for you?