|
|
|
|
|
|
Hello,
In this edition of the Security Expert Technical Newsletter, I would like to remind you that Check Point R80.10, with its amazing capabilities, was released and if you have not yet upgraded, below you will find additional reasons why you should.
I would also like to take the time to update you on the latest announcements regarding Jumbo Hotfix Accumulator for R80.10 and our newest appliances, Smart-1 405 and 410.
Check Point new community, CheckMates, is also becoming popular and our public site also has a new “Under Attack?” button, to quickly report an attack incident and block it.
You will also find updates on additional new releases such as SMP R12.30 for SMB appliances, R77.20.60 for SMB appliances, and cool new tools such as Identity Collector and Capsule Workspace App Wrapping.
Last, there are important and popular SecureKnowledge solutions, some highlights from Education and Training Services and more.
As always I hope you will find this information useful.
Sincerely,
Ronen Zel
SecureKnowledge Project Manager
Check Point Software Technologies, Ltd.
|
|
|
What is YOUR version? Check Point underlying software R80.10 is already available!
If you have not upgraded yet, here is why you should:
- Unified policy and inline layers enable flexible control over the security policy behavior.
- New Content Awareness Software Blade adds visibility and control over data transfers in the network traffic, using data types based on content, file types, and direction.
- Threat Prevention performance increase by up to 37% based on real-world performance.
- Domain Objects, Dynamic Objects and Time Objects are fully accelerated.
- 64-bit support for VSX Gateways, increasing concurrent connections capacity.
- MultiCore Support for IPsec VPN. See sk118097 for more details.
- Automatic MAC magic selection – The MAC Magic value is acquired automatically and is backward compatible with gateways that were configured manually in earlier versions.
- Threat Emulation MTA (Mail Transfer Agent) support in VSX. You can run MTA for each VS instance.
- New API for Identity Awareness – Gateway REST API to manage identities from 3rd party or customized system.
- And much more…
You might also want to check out the following R80.10 clips:
Plan your upgrade today!
|
|
|
Jumbo Hotfix Accumulator for R80.10 (R80_10_jumbo_hf) Just like Jumbo Hotfix Accumulators for other versions, R80.10 Jumbo Hotfix Accumulator is an accumulation of stability and quality fixes resolving multiple issues in different products.
R80.10 Jumbo Hotfix Accumulator Take_#35 is a General Availability release that can be directly downloaded from Check Point Cloud using CPUSE (Check Point Update Service Engine) and from this article.
It includes important fixes and enhancements for Security Management, Security Gateway, Application Control, vSEC, Identity Awareness and more.
Click the link to below for details.
|
|
|
New Appliances: Smart-1 405 and 410 Running Check Point R80.x Security Management software, Smart-1 405 and Smart-1 410 models provide superior operational efficiency and boosted performance comparing to their predecessors Smart-1 205 and Smart-1 210 models.
Key features include:
- Boosted performance delivering response times and log search results in under 1 second
- Faster report generation time (by up to x8)
- Accelerated policy installation time (by up to x5)
- Stronger CPU and x4 more RAM memory
- Doubled capacity of log collection and indexing
- Management of up to 5 Security Gateways with Smart-1 405
- Management of up to 10 Security Gateways with Smart-1 410
|
|
|
New Check Point community: CheckMates CheckMates is Check Point’s new user community. Using CheckMates you can interact directly with your peers and experts from Check Point. You can ask for help and get answers quickly.
You can also gain access to exclusive members only content. Watch this short clip for a quick CheckMates tour.
Visit CheckMates now and see for yourself what a valuable resource CheckMates can be.
|
|
|
Under Attack? New Incident Response in Check Point public web site When the worst happens and you or your customer gets attacked, trust Check Point to mitigate your risk with the Incident Response Service. Just call our dedicated hotline anytime you experience a security threat and our 24×7 experts will instantly respond to help you contain the threat, minimize your losses and return to business as usual.
Our Incident Response service will also help you mitigate future risks with post-incident reports and security best practices advisement.
|
|
|
R77.30 Mobile Access Blade Deployment Agent for Chrome and Firefox The Check Point Mobile Access Portal offers a variety of on-demand client technologies, including SSL Network Extender, Compliance Scan and Secure Workspace.
The on-demand technologies are downloaded and invoked by the Mobile Access Portal Deployment Agent.
For Internet Explorer browsers, the Deployment Agent is implemented as an ActiveX control. For all other Web browsers it is implemented as a Java Plugin, leveraging the Java NPAPI technology.
Java Plugins have been deprecated by the various web browsers, including Chrome, Firefox and Edge.
This new release introduces a new Mobile Access Portal Deployment Agent technology. It overcomes the limitations described above, and allows the on-demand clients to run on Chrome and Firefox, on Windows and on Linux platforms.
|
|
|
Security Management Portal R12.30 for SMB Appliances This release introduces some exciting features and improvements for the SMP. The release is now available for Check Point cloud customers (vSMP), and will be available for on-premise installations soon.
Some of those features are:
- Ability to manage Firewall Access Policy from the SMP
- VPN Community Enhancements
- SandBlast Zero-day Protection Threat Emulation
|
|
|
R77.20.60 for Small and Medium Business Appliances R77.20.60 for Small and Medium Business Appliances presents a new WebUI design. Its main new feature is IPv6 support in 700, 1400 and 1200R appliances.
It also includes performance and stability fixes, as well as enhanced license support: License is now retained when restoring configuration from another appliance and User Center includes ALL-IN-ONE EVALUATION license support.
In addition it includes a large number of resolved issues (complete list here).
|
|
|
New Identity Awareness application: Identity Collector Check Point Identity Collector is a Windows-based application which collects information about identities and their associated IP addresses, and sends it to the Check Point Security Gateways for identity enforcement.
The identities are collected from the following servers:
- Microsoft Active Directory Domain Controllers.
- Cisco Identity Services Engine (ISE) Servers, versions 2.0, 2.1 and 2.2.
|
|
|
Capsule Workspace App Wrapping Capsule Workspace App Wrapping solution extends Capsule Workspace to offer 3rd party apps in a security container that provides multi security layers and access for both iOS and Android apps.
It goes beyond Mail, Calendar, Contacts, Saved Files, and Web Apps, to also include various Line-of-Business apps.
These Line-of-Business apps are potentially vulnerable, since they often are not written using proper security measures. These vulnerabilities can lead to a data leakage on compromised BYOD, or as a result of wrong user actions.
Furthermore, in most cases these apps require secure access to the organization’s resources. This access is not part of the original application. Working with general VPN clients without per-app-VPN can expose the organization to unauthorized access.
Check out Capsule Workspace App Wrapping today.
|
|
|
New Advanced Troubleshooting Guides
|
|
|
Important SecureKnowledge Solutions
- MultiCore Support for IPsec VPN in R80.10 and above – sk118097
- Portable SmartConsole for R80.10 – sk116158
- How to use R80.10 Packet Mode feature to search in Access Control Policy? (video) – sk118592
- How to export Check Point logs to a Syslog server using CPLogToSyslog – sk115392
|
|
|
Top 5 Recent SecureKnowledge Solutions
- Anti-Virus blocks legitimate traffic with DNS trap or DNS reputation logs – sk117852
- Mobile Access SSL Network Extender, Compliance Scan and Secure Workspace are not working after installing or upgrading Java on the endpoint PC to Java 8 update 131 – sk117065
- “Warning: Can’t find ::CPSB-CTNT in cp.macro. License version might be not compatible” message during policy installation or in CLI – sk117577
- R80.10 Pre-Upgrade Verifier notifications and their solutions – sk117237
- How to get the interfaces without changing the current topology in SmartConsole R80 and above – sk118518
|
|
|
Tip of the Week: Subscribe to get a weekly notification about Solutions, Downloads and Documentation You can register for a weekly notification e-mail about new and updated SecureKnowledge solutions, documentation and downloads. You can choose all products or specific products of interest.
To do so go to Support Center -> ‘ASSETS / INFO -> MY INFO: My Subscriptions -> SecureKnowledge Solutions, Documentation and Downloads’.
Select Data Type, desired product and click ‘Subscribe’.
See screenshot here.
|
|
|
Cyber Security Learning Credits (CLC) Cyber Security Learning Credits (CLC) is a new path for end-users and partners to purchase certification training vouchers via the product catalog with products and services orders. CLC is a new program that enables you to get the most of your Check Point Cyber Security investments and meet your business goals. Check it out at the product catalog in the Training section or contact clc@checkpoint.com for more information.
For CLC Calculation Chart for Course Catalog click here.
|
|
|
R80.10 CCSE exam Our Certification Team will be releasing the R80.10 CCSE exam at PearsonVUE in early August. That exam number is 156-315.80. The CCSE Update exam will also be released later in August. The CCSE Update exam is a fast path for past version CCSE professionals to get current with their certification status. This exam is number 156-915.80.
As we moved toward the R80.10 product release, there have been many questions related the certification program offerings. Check out the Certification FAQ for more help
|
|
|
If you have any comments regarding this Newsletter or Support Center in general, send your feedback to skhelp@ts.checkpoint.com.
|
|
|
|
