Yep IPS was at long last fully integrated with the rest of the Threat Prevention blades in R80.10 gateway. Also Geo Protection was renamed Geo Policy and is no longer part of the IPS blade in...
CPUG: The Check Point User Group | |
Resources for the Check Point Community, by the Check Point Community.
| |
First, I hope you're all well and staying safe. | |
|
Type: Posts; User: ShadowPeak.com
Yep IPS was at long last fully integrated with the rest of the Threat Prevention blades in R80.10 gateway. Also Geo Protection was renamed Geo Policy and is no longer part of the IPS blade in...
Not exactly, if you have an R80.10 gateway IPS can be managed in the same TP profile and policy layer as the other four Threat Prevention blades. As such you can use columns such as Protected Scope...
It will be inspected by IPS.
Whether the traffic is reverse (or return), doesn't matter. If the packet is trying to leave towards an interface marked as Internal it will be inspected by IPS.
Not came from (ingress), but leaving on (egress) is what this setting impacts. What interface the traffic arrived on originally is not relevant to this IPS setting. DMZs are considered equivalent...
All that matters is whether the interface is set to Internal or External on the Topology page of each interface. Pretty sure this setting does not care about the IP addressing.
However your...
I covered this pretty thoroughly in my book, here is the text:
Perform IPS Inspection on all Traffic – This is typically the default setting. All
traffic regardless of direction has IPS...