Greetings! This bulletin features Check Point SmartDefense Services highlights for the month of . Please feel free to email us if you have any comments or questions.

To sign-up to the mailing list, send an email to listserv@amadeus.us.checkpoint.com with the text "SUBSCRIBE SMARTDEFENSE-NEWS" in the email body. If you'd like to unsubscribe from this bulletin, send an email to listserv@amadeus.us.checkpoint.com with the text "SIGNOFF SMARTDEFENSE-NEWS" in the email body.

About SmartDefense Services
What's New
Advisories
Defense Updates

Check Point SmartDefense Services maintain the most current preemptive security for your Check Point security infrastructure. To help your defenses stay continuously ahead of today’s constantly evolving threat landscape, SmartDefense Services provide:

• Preemptive, ongoing, and real-time updates to defenses and security policies
• Ongoing new protocol and application defenses against emerging threats and attacks
• Step-by-step instructions on how to activate and configure defenses against emerging threats and vulnerabilities – usually before exploits are created by hackers
• Messaging Security updates (providing comprehensive protection for email infrastructures) for UTM-1 Total Security appliances and VPN-1 UTM Total Security software licenses
• Anti-virus updates and alerts for Check Point VPN-1 UTM
• Anti-spyware updates for Check Point Endpoint Security 
• Malicious applications database for automating network access and malware termination policies (Program Advisor Service for Check Point Endpoint Security)

New SmartDefense User Forum
Participate in the new SmartDefense User Forum. The SmartDefense Forum is your space for asking questions regarding all SmartDefense features. The role of this forum is to allow SmartDefense users to collaborate with other SmartDefense users, worldwide, on SmartDefense-related issues. Check Point employees may monitor the Forum and provide information on the issues posted.

Security Advisory: SmartDefense Provides Preemptive Protection against Multi-Vendor DNS Vulnerability
The latest DNS cache poisoning technique, announced by CERT on July 8, 2008, exploits DNS requests that do not randomize source ports (CVE-2008-1447). The spoofing vulnerability has been reported in major DNS implementations, including Microsoft Windows DNS service and Berkeley Internet Name Domain (BIND). Check Point VPN-1 Power/UTM and Connectra protect customers from the attack by using SmartDefense DNS request scrambling, which has been available to customers since March 2005. For more information on this threat, refer to SmartDefense Services Advisory CPAI-2008-092.

Security Advisory: Protections against Apple Safari Remote Code Execution on Windows and Related Vulnerabilities
The widely reported vulnerability affects users of Windows XP and Vista when Apple’s Safari for Windows is installed. However, the underlying vulnerability deals with how Windows handles dynamic link libraries (DLLs) and is more serious. Apple issued a patch on June 19th for the Safari-specific vulnerability. Microsoft has not released a patch for the broader DLL threat, which is a blended threat in which files may be downloaded to a machine without prompting, allowing them to be executed. SmartDefense Services Update CPAI-2008-082, issued on June 2, provides protection not only from the Safari instance of the DLL threats but other exploits that may try to utilize the broader vulnerability.

New SmartDefense Microsoft Security Page
A dedicated SmartDefense web section with details and links for Microsoft vulnerabilities and related Check Point defenses.SmartDefense protections can secure the period between release of a Microsoft patch and the time that the patch is successfully applied throughout your network infrastructure. Visit the SmartDefense Microsoft Security Page for additional information.

Messaging Security -- Protect your Email Infrastructure
Check Point Messaging Security provides comprehensive protection for an organization's email infrastructure with multiple dimensions of defense, including: anti-spam, IP reputation checks, mail antivirus, malware protection, etc. Messaging Security is available as part of Check Point UTM-1 Total Security offerings Visit the Messaging Security site for more information.