outsourcing mta and sandbox

[FireMage]

hello everyone and happy new year.

i have an r81.20 or r82 and the mta incl. sandbox to check the attachments of the email. but now i would like to activate the autonomous profiles. unfortunately this is not possible with activated mta. is there a possibility to move the mta functions to a separate server, as for example with the smartevent. if so, how would that look like and does it work with the licenses? or is there even a completely different solution with checkpoint?

thank you
jeff

[Chris_Atkinson]

Obviously mail is currently on-prem, any plans to adopt O365?

(Harmony Email would be the solution to investigate in this case)

You would not have the MTA and SmartEvent as the same machine.

Deploying a dedicated TE appliance(s) as an MTA is an option however.

[FireMage]

hello chris,

the smartevent is currently on its own vm. only the management and enforcement is with the mta on its own vm.

0365 would be a solution, but harmony is client-oriented and that is not desired. it should be a pure mta gateway. further licenses would also be required.

what do you mean by “However, the provision of one or more dedicated TE devices as MTA is an option.”?

would it be possible to run the mta as a dedicated vm?

I could understand simply creating a new r82 vm and disabling everything except the mta function, but that would require another license.

can i deactivate everything under the new firewall “General Properties” - except for the sandblast “threat emulation” under “threat prevention” and then assign the license to the new server?

thanks
jeff

[Chris_Atkinson]

Harmony Email & Collaboration is SaaS (no client requirement) and shouldn't be confused with Harmony Endpoint.

Deploying a separate virtual gateway as an MTA is plausible and would leverage the cloud for TE presumably as your existing arrangement does rather than local TE.

Most any changes will require some additional license requirements, suggest engaging your local SE to discuss further.