> Source: [sk170425](https://support.checkpoint.com/results/sk/sk170425) # sk170425 - Comparison between R81 and R81 for Scalable Platforms | Property | Value | |----------|-------| | Solution ID | sk170425 | | Date Created | 2020-11-23 | | Last Modified | 2021-09-02 | | Technical Level | General | | Products | Scalable Platforms | | Versions | R81 (EOS) | | OS | Gaia | ## Solution This is a features comparison between [R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122485&partition=General&product=All%22) and [R81 for Scalable Platforms](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169954). For more information, see [sk173183 - Scalable Platforms (Maestro and Chassis) comparison between versions](https://supportcontent.checkpoint.com/solutions?id=sk173183). **Table of Contents:** * Firewall and Security Policy * VSX * Gaia * Installation and Upgrade * Logging * Cluster * VPN * Remote Access VPN * Network Management * Next Generation Security Gateway * System Management and Monitoring * Rate Limiting and DoS Mitigation * Performance Tuning * Threat Prevention * CloudGuard * Mobile Access * Identity Awareness * Compliance * HTTPS Inspection * CPDiag * Access Control * Data Loss Prevention / Certificate Authority * Advanced Routing * Dynamic Routing ### Firewall and Security Policy {#FW} |-----------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | L3 Firewall | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | L2 Firewall (Bridge mode) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | QoS | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | ISP Redundancy | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Multicast | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Identity Awareness Captive Portal | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | NAT IPv4 / NAT IPv6 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | NAT 64 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Dynamic Anti-Spoofing | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Support for Domain objects, Updatable objects, Security Zones, Access Roles and Data Center objects | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Hit Count for NAT rules | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | NAT Enhanced policy | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Accelerated Policy Installation | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | ### VSX {#VSX} |-----------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | VSX L3 Firewall | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | VSX L2 Firewall | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | No Support for VSX Multi-Bridge. | | Virtual Switches | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Virtual Routers | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Identity Awareness Captive Portal | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | VSX Multicast | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | NAT IPv4 / NAT IPv6 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | NAT 64 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | VSX QoS, Light Weight (CPQoS) (12) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | SP limitation. | | QoS (Floodgate-1) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Dynamic Anti-Spoofing | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | "vsx_util reconfigure" | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0041902122152.png) | After running the "vsx_util reconfigure" command, you must install policy on all Virtual Systems. | | Downgrade VSX management objects to earlier versions using the "vsx_util" | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Support for Domain objects, Updatable objects, Security Zones, Access Roles and Data Center objects | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | NAT Enhanced policy | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Installation and Upgrade {#Installation and Upgrade} |--------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | CPUSE | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0041902122152.png) | To be used via Global Clish (gclish) shell only | | Hotfix Uninstall | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0041902122152.png) | Using the CPUSE | | Licensing in SmartUpdate | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Installation of a Central license with SmartUpdate requires a policy installation on the Security Gateway / VSX Gateway (context of the VS0) in order to propagate the license to all members. | ### Gaia OS {#Gaia} |-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Gaia CLI | clish | gclish | | | Gaia Portal | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | First Time Configuration Wizard (Portal + CLI) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Snapshot | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | Restore snapshots only on the same chassis type and SGM model on which it was collected. | | Backup / Restore | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | NTP Client | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | RADIUS / TACACS Users | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Alias Interfaces | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | The Google Compute Engine Virtual Network Interface (gVNIC) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Virtual Extensible LAN (VXLAN) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Generic Routing Encapsulation (GRE) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Link Layer Discovery Protocol (LLDP) configuration trough CLISH and the Gaia Portal | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | IP address conflict detection | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Multi-Queue for Gaia Management interfaces | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Gaia REST API | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | ### Logging {#Logging} |----------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Firewall and Software Blade logs | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | Logs for session connections generated by Software Blades on R81 for Scalable Platforms do not show the SGM ID. | | Syslog | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Fetch Logs | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | UserCheck | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Cluster {#Cluster} |------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Cluster HA | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | Chassis only, no unicast CCP | | Cluster LS | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Cluster VSX HA | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Cluster VSX VSLS | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | **\***More than two sites are planned for Maestro. ### VPN {#VPN} |-----------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | IKEv1 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | IKEv2 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Multicore VPN | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Dynamic Routing VPN through Virtual Tunnel Interface (VTI) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Solved in R81 Jumbo HF Take_34 and R81.10 | | Link Selection | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Route-Based Probing for link selection | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | Tunnel Sharing modes (per host, subnet, Gateway) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Wire Mode | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | NAT Traversal | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | "orig_route_params" (magic button) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Peer configured as DAIP (with Dynamic IP address) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Tunnel Test | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | VPN Routing configurations: 1. Gateway as satellite w/ peers through 2. Client to Site Traffic over Site to Site VPN Tunnel | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | Traditional VPN mode | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | Virtual Tunnel Interfaces (VTIs) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | Corporate Enforcement | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | Multiple ciphers for external Security Gateways in a single VPN community | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | SHA-512 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Remote Access VPN {#RVPN} |-------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Office Mode | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | DHCP, Radius | | Visitor Mode (TCPT) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Client IP change | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | SNX | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Endpoint Security | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Simultaneous Login Prevention (SLP) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Limitation from R80.20SP | | Hub Mode | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Location Awareness | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | User certificate enrollment | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Desktop Security | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | SCV Support | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Network Management {#Network Management} |------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Multi Bridge | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | DHCP Server | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | DHCP Relay | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | DHCP Client | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Netflow IPFIX | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Management Data Plane Separation (MDPS, [sk138672](https://supportcontent.checkpoint.com/solutions?id=sk138672)) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | ### Next Generation Security Gateway {#Next Generation} |--------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Mirror and Decrypt | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | See the Security Gateway Administration Guide for changes in the configuration procedure | | ICAP client | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | See the Security Gateway Administration Guide for changes in the configuration procedure | | ICAP Server | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Hardware Security Module (HSM) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | See the Security Gateway Administration Guide for changes in the configuration procedure | | Private ThreatCloud (PTC) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | For details on how to enable PTC in R81 for Scalable Platforms, see [sk161534](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161534) | ### System Management and Monitoring {#System Management} |---------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | SNMP | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Alerts | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0041902122152.png) | See Scalable Platforms Administration Guide for configuration procedure. For Maestro, there are no alerts on Orchestrator. | | Job Scheduler | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | CPView | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | Only per SGM, statistics are not aggregated. | ### Rate Limiting and DoS Mitigation {#Rate Limiting} |----------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Penalty Box | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Rate Limiting rules - "fw samp" / "fw samp_policy" | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Replaced by the "fwaccel dos" commands | | Suspicious Activity Monitoring Rules - "fw sam" | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Replaced by the "fwaccel dos" commands | | Accelerated SYN Defender - "fwaccel synatk" | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | Supported only from Scalable Platform CLI with the "g_fwaccel synatk" command (it is not supported to configure the IPS "SYN Attack" (SYN Defender) protection in SmartConsole) | ### Performance Tuning {#Performance Tuning} |--------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Dynamic Dispatcher | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Priority Queues | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Threat Prevention {#Threat Prevention} |-----------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comment** | | IPS | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Anti-Bot | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Anti-Virus | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Anti-Malware | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Anti-Spam | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0041902122152.png) | Security Gateway only | | Cloud Threat Emulation | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Remote Threat Emulation (Dedicated appliance) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Threat Extraction | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | For known limitations, refer to [sk148074](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk148074). | ### CloudGuard {#CloudGuard} |-----------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | CloudGuard Controller | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Mobile Access Blade {#MAB} |---------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Mobile Access Blade | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Identity Awareness {#IDA} |----------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Identity Awareness | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Azure Active Directory support | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Identity Awareness nested groups | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Security ID (SID) support | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Compliance {#Compliance Blade} |-------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Compliance | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### HTTPS Inspection {#HTTPS Inspection} |----------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | SSL inspection | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | FutureX Hardware Security Module (HSM) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | Not supported with TLS 1.3 | | TLS 1.3 | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | TLS 1.3 is off by default and is only applicable if User Space Firewall (USFW) is active. | ### CPDiag {#CPDiag} |-------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | CPDiag | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Access Control {#Access Control} |---------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | Application Control | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | URL Filtering | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Content Awareness | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | Updatable Objects | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Data Loss Prevention / Certificate Authority {#DLP} |-------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | **Comments** | | DLP | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0041902122152.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0041902122152.png) | Security gateway only. VSX mode not supported. | | CA | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | ### Advanced Routing |-------------------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------| | **Feature** | **R81** | **R81 for SP** | | OSPFv3 AH authentication for OSPFv3 protocol security | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | IPv6 route aggregation | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | IPv4/IPv6 NAT-pool routes | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | Routing Information Protocol (RIP) route sync | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | PIM restart capability | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | ### Dynamic Routing |--------------------------------------------|-------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------|--------------------| | **Feature** | **R81** | **R81 for SP** | **Comment** | | RIP (IPv4) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | RIPng (IPv6) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | PIM | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | OSPFv2 (IPv4) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | OSPFv3 (IPv6) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | BGP | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | Supports IPv4/IPv6 | | BFD | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | Supports IPv4/IPv6 | | PBR | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | | | BGP support for VxLAN interfaces | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | | Dynamic Routing support for GRE interfaces | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0021902121151.png) | ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk147033/image0031902122151.png) | | --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content