Advanced Settings

The Device view > Advanced section > Advanced Settings page is for advanced administrators or Check Point Support.

You can configure values for multiple advanced settings for the various blades.

Important - Changing these advanced settings without fully understanding them can be harmful to the stability, security, and performance of this appliance. Continue only if you are certain that you understand the required changes. For further details regarding the attributes, consult with Check Point Support when necessary.

Note - Some attributes appear only in the Locally Managed mode.

Filtering the List of Attributes

In the search field that shows Type to filter, enter the text.

The table updates in real time.
To cancel the filter, click X next to the search string.

Configuring the Attribute Values

Left-click an attribute to select.
Click Edit.

The attribute window opens.
Configure the settings, or click Restore Defaults to reset the attribute to the default settings.
Click Apply

Restoring Default Values

Above the table with attributes, click Restore Defaults.

The Confirm window opens.
Click Yes.
All appliance attributes are reset to the default settings.

Clarifications

This section contains clarifications for specific attributes.

Attribute Name

Note

Cluster Synchronization

Starting from R81.10.15, you can select the Synchronization mode:

Sync Enabled – All kernel tables are synced, enabling seamless failover between members.
Sync Disabled – Kernel tables are not synced between the cluster members. This may lead to disrupted connections.
Optimized Sync – Syncs most kernel tables but not heavy kernel tables. In this mode, failover results in closed connections.

Note – VPN tunnels persist following failover.

The benefit of not synchronizing tables is improved performance. The downside is that upon failover you may need to re-initiate connections.

Switching to Sync Enabled or Optimized Sync mode requires a reboot of both cluster members.

Two-Factor Authentication - Enable selection of target where to send the passcode (SMS/email)

Select or clear the checkbox:
- Cleared - The appliance sends the OTP by SMS and by Email (this is the default).
- Selected - After an end-user clicks "Connect" in their Remote Access VPN An encrypted tunnel between remote access clients (such as Endpoint Security VPN) and a Security Gateway. client, in the next window the end-user must enter a mobile phone number to get the OTP by SMS, or enter an email to get the OTP by Email.
Click Apply

Note - This setting does not affect the selection screen in the WebUI on the VPN Remote Access Control page. The user must still configure to receive the passcode through email, SMS, or both options.

All attributes, whose name starts with "DSL globals"

When all the ADSL standards are turned off in the Advanced Settings, and you can only connect using the VDSL2 standard, the VPI, the VCI, and the encapsulation options still appear, even though they are not used to open an Internet connection.

Changes Between Versions

This section describes changes in attributes in different R81.10.X versions.

Attribute Name	Supported Versions
Cluster - Disable all non-synced interfaces	R81.10.15 and higher
System Settings - Allow access from any IP address	R81.10.15 and higher
OS advanced settings - Enable SIM switch on lower tech	R81.10.15 and higher
OS advanced settings - SIM switch on lower tech delay	R81.10.15 and higher
OS advance settings - SIM switch on lower tech lowest allowed tech	R81.10.15 and higher
OS advanced settings - Default routes rank	R81.10.10 and higher
Dr. Spark job	R81.10.08 and higher
Fonic settings - Mode	R81.10.08 and higher
OS advanced settings - Enable automatic WiFi channel change	R81.10.08 and higher
OS advanced settings - Enable GPS	R81.10.07 and higher
OS advanced settings - Enable Jumbo Frames	R81.10.07 and higher
USB Modem Watchdog - Enabled by Default	R81.10.05 and higher
Smart Accel Settings - Accel Trusted Https Domains Only	R81.10.05 and higher
Cluster - Synchronization	R81.10.05 and higher
Smart Accel Services - Security logs enabled	R81.10.05 and higher
Two-Factor Authentication - Enable selection of target where to send the passcode (SMS/email)	R81.10.05 and higher
OS advanced settings - IPv6 prefix selection Mode	R81.10.05 and higher
VPN Site to Site global settings - IKEV2 Key Type	R81.10.05 and higher For more information on how to set up this connection, see the: Harmony Connect Administration Guide Harmony Connect for SMB Gateways Integration Guide