October 13, 2009

IN THIS ADVISORY:

• Top Protections

• Microsoft SMBv2 Vulnerabilities
• Microsoft Windows Media File Vulnerabilities
• Microsoft Windows LSASS Authentication

• Deployment Tip

• Dramatically decrease maintenance time and log management with automatic activation

• Highlighted Protections

• Including Patch Tuesday

DEPLOYMENT TIP
Best Practice: Dramatically decrease maintenance time and log management with automatic activation
Administrators strive to find the right balance between activating enough protections to adequately defend their networks with the need to conserve system resources and to limit the burden of log management. Even choosing which protections to activate can become a time-consuming chore on its own.

With Check Point’s IPS Software Blade, administrators can avoid these problems by efficiently controlling the entire body of protections through automatic activation. Administrators can configure their profiles to automatically activate protections based on the criteria they set in the IPS policy. These criteria include severity, confidence level, and performance impact. Of course, if there is ever a need to manually modify a protection setting to make an exception, administrators can easily override the automatic setting.

To automatically activate protections in a profile:

1. In the Profiles page, double-click a profile.
2. Select IPS Policy and configure the criteria for activating protections according to your needs. For example, you can choose to activate only client settings, or only those with low performance impact.
3. Click OK to apply the automatic activation configuration and close the Profile Properties window.

Have SmartDefense feature questions?
Participate in the SmartDefense User Forum. The SmartDefense Forum is your space for asking questions regarding all SmartDefense features, and to collaborate with other SmartDefense users, worldwide, on SmartDefense-related issues. Check Point employees may monitor the forum and provide information on the issues posted.

Know someone who should be getting the Advisories?

» About the Check Point Update Services
Check Point provides ongoing and real-time updates and configuration information to its R65 products through SmartDefense Services, and to Check Point R70 products through an update service included with the relevant Software Blade subscriptions. These updates increase the value of your Check Point products and minimize threats by providing defenses that can be used before vendor patches are applied throughout your network. These defenses are developed and distributed by Check Point’s global Research and Response Centers. For more information, visit www.CheckPoint.com.