Dameon Welch-Abernathy

This Week in CheckMates 12 November 2018

Blog Post created by Dameon Welch-Abernathy Moderator on Nov 12, 2018

 

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

 

CheckMates in Kiev and Jacksonville

This week, Valeri Loukine was in Kiev doing our first event. 

Have to say, I'm jealous: it looks like a nice facility!

 

 

Meanwhile, I was in Jacksonville, Florida with Adam Forester talking about the API:

 

 

Community Highlights

Meanwhile, here are the conversations worth watching in the community:

 

Call For Papers CPX 360 2019 

CPX 360 is coming up. Got something to speak about? We'd love to have you!

 

Invitation to join a new EA program for HTTP/2 inspection 

Need to inspect the next generation of HTTP? This would be a great Early Availability program to be a part of!

 

Gateway behind NAT. What limitations am I to be aware of? 

My guess is this is more common of a configuration than we think.

 

HTTP Daemon (Multiportal) on HA Standby device (R80.10 build 421) 

If you're not able to get to HTTPS on the standby device, this is a quick thing to check.

 

Bypassing IPS Protections - MySQL 

There's a couple ways to exclude certain protections from inspection on certain hosts.

 

Disable "Local interface address spoofing" 

This comes up when you run a Security Gateway with a mirror port.

 

Let's create Check Point Super Cheat Sheet 

A neat idea, but we've got a few of these already (and they're linked here).

 

Migrating policies from standalone gateway to new management server 

Hopefully we'll have a better solution for this problem in the near future. In the meantime, there's this.

 

Hide NAT issues with virtual addresses 

Don't forget Layer 2 when you NAT.

 

R80.20 Managing R80.10 Gateway - CPU Increase 

Curious issue where we did find a bug with SecureXL licensing on Open Servers.

 

R80.x Performance Tuning Tip – SMT (Hyper Threading) 

This applies to R77.x as well on Check Point appliances.

 

Upcoming Events

Between Valeri Loukine and I, we'll be busy in the next several weeks!

Also, note the upcoming Techtal

Outcomes