Table of Contents
Advertisement
5. Enter a time for Re-authentication frequency (in seconds).
6. Click Apply.
To disable 802.1x authentication on an interface:
1. Go to Device > Local Network.
Select the LAN interface and click Edit.
2. The Edit window opens in the Configuration tab.
3. Click the Advanced tab.
4. Clear Activate 802.1x authentication.
5. Click Apply.
To configure logging for MAC filtering and 802.1x authentication:
1. Go to Device > Advanced Settings.
2. Set the value of the MAC Filtering settings - Log blocked MAC addresses attribute to
•
Enabled - To enable logging
Disabled - To disable logging.
•
Note - This attribute is available only in Locally Managed mode. In Centrally Managed mode,
configure logging with CLI.
3. Optional -
•
To reduce the number of logs, specify the value of the MAC Filtering settings - Log
suspension attribute in seconds.
•
To show all logs, set the value to "0".
Note - Traffic dropped in the WiFi driver is not logged.
Configuring the DNS Server
In the Device > DNS page you can configure the DNS server configuration and define the domain
name.
To configure DNS:
1. Select to define up to three DNS servers which is applied to all Internet connections or use the
DNS configuration provided by the active Internet connection (Primary).
If you select Configure DNS servers, make sure that you enter valid IP addresses.
Use the first option if your DNS servers are located in the headquarters office. In this case, all
DNS requests from this branch office are directed to these DNS servers.
The second option allows a more dynamic definition of DNS servers. The gateway uses the
DNS settings of the currently-active Internet connection (in case of static IP – the DNS
manually provided under "Internet connection"-> Edit, in case of DHCP / Dialers – the DNS
automatically provided by the ISP). If Internet Connection High Availability is enabled, the DNS
servers switch automatically upon failover.
2. By default, the Check Point Appliance functions as your DNS proxy and provides DNS resolving
services to internal hosts behind it (network objects). This option is global and applies to all
internal networks.
To get IP addresses directly from the DNS servers defined above, clear the Enable DNS Proxy
checkbox.
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.75
Appliance Configuration
|
76
Advertisement
Table of Contents
