Managing traffic with Smart Monitor?

[Spacetrucker]

R60 Splat HF2 First, is the full blown version of Smart Monitor included with R60, or is that a module you have to pay extra for? Second, we have websites that have links to pdf files, click on the link to view the pdf or download it. Folks are writing automated routines that scalp all the info off the sites. So once we get a few of these routines running against the sites and downloading these 100 mb pdf's things get slow. I've been asked if R60 can control this type of traffic, can it? We don't want to stop folks from downloading the pdf's, but we do want to throttle\manage it.

[Thorpuse]

1. SmartView monitor requires either a UTM-1 Appliance SmartCenter license, Eventia Reporter or a SmartCenter Power SCS license. No, you cannot license just the SVM feature set on its own anymore. Yes, this is a crazy set of criteria for something that should be standard in the product. No, this isn't explained anywhere any more coherently than this that I'm aware of.

2. Check Point QoS (aka Floodgate) is a gateway add-on for traffic management. I'd suggest you look there first. Although in that situation, I'd be looking more at a proxy server solution to cache the pdfs and manage the traffic there. BlueCoat is a good, although potentially expensive, solution in that space.

[cciesec2006]

Originally Posted by Thorpuse

1. SmartView monitor requires either a UTM-1 Appliance SmartCenter license, Eventia Reporter or a SmartCenter Power SCS license. No, you cannot license just the SVM feature set on its own anymore. Yes, this is a crazy set of criteria for something that should be standard in the product. No, this isn't explained anywhere any more coherently than this that I'm aware of.

2. Check Point QoS (aka Floodgate) is a gateway add-on for traffic management. I'd suggest you look there first. Although in that situation, I'd be looking more at a proxy server solution to cache the pdfs and manage the traffic there. BlueCoat is a good, although potentially expensive, solution in that space.

"No, you cannot license just the SVM feature set on its own anymore"

Yes you can get the SVM feature only. I got it through IBM/ISS a couple
weeks ago after about complaining bitterly to Checkpoint about it.
CP finally gave me the SVM license. I do NOT have to pay for software
subscription and maintenance eihter because this license has no part
number associates with it. Go figure.

[Thorpuse]

Well done!!!! I guess I need to work a little more on my bitter complaining technique... :P

[Spacetrucker]

Ok, I'll the take the beating:) What's SVM mean? Thorpuse - are you saying I can use the QOS feature to manage that traffic? I've done a little reading on it, if I understand it correctly you use it to assign priority\weights to different services\protocols, similar to a Packet Shaper. Thanks for the suggestion on using a proxy server and caching the pdf's. cciesec2006 - IBM/ISS is this your Checkpoint reseller? Who did you complain to , your area Checkpoint sales rep, or Checkpoint directly, or your reseller?

[Thorpuse]

SVM=SmartView Monitor

[Spacetrucker]

If an http request is greater than 512 kb can you automatically reassign it to a lower priority?