Check Point Advisories

Updating IPS Blade with the Latest Dynamic Protections

Vulnerability
Protection

Check Point Reference:	SBP-2006-05
Date Published:	30 Aug 2006
Severity:	High
Last Updated:	24 Apr 2017
Source:	IPS Release Management
Protection Provided by:	Security Gateway R75+ R71 R70
Who is Vulnerable?	Security Gateway
Vulnerability Description	IPS dynamic updates are available to customers who have purchased the IPS subscription service. Customers with valid subscription license can choose the attacks to defend against, read detailed information about the attack, configure parameters for each attack defense, including logging options, receive real-time information on attacks, and update IPS with new capabilities. Keeping up-to-date with the latest IPS defenses does not require up-to-the-minute technical knowledge. A single click on the Online Update button updates IPS with all the latest defenses from the IPS website.
Vulnerability Details	When you buy a IPS subscription, you are given a license that enables you to download IPS updates. IPS updates are sent to your computer from one of the SmartCenter enforcement modules.

Protection Overview

In this section you can learn how to obtain the latest IPS Protections for all Security Gateway, VPN-1, InterSpect, Connectra and IPS-1 versions.

To activate the downloaded IPS updates, you must Install security policy (Policy > Install) in Security Gateway and VPN-1 modules or Activate Settings (Action > Activate Settings) in InterSpect modules.

To configure the defense, select your product from the list below and follow the related protection steps.

Security Gateway: R75+

How Can I Protect My Network?
To obtain the latest IPS dynamic update:

1. In the IPS tab, click Download Updates.
2. In the configuration pane, under Download Updates, click Update Now.
3. Install security policy (Policy > Install).

How Do I Know if My Network is Under Attack?
When IPS detects an attack a log is generated and appears in SmartView Tracker > Network & Endpoint Queries > Predefined > Network Security Blades > IPS Blade > All.

Security Gateway: R70/R71

How Can I Protect My Network?
To obtain the latest IPS dynamic update:

1. In the IPS tab, click Download Updates.
2. In the configuration pane, under Download Updates, click Online Update.
3. Install security policy (Policy > Install).

How Do I Know if My Network is Under Attack?
When IPS detects an attack a log is generated and appears in SmartView Tracker > Network & Endpoint Queries> Predefined > Network Security Blades > IPS Blade > All.