topic Re: Managing Unsupported Gateways with Check Point R80.10 in Firewall and Security Management

Managing Unsupported Gateways with Check Point R80.10

PhoneBoy — Wed, 09 Aug 2017 22:46:23 GMT

You may have noticed when creating a new gateway object on an R80.10 management console that you can create a gateway going back to version R70:

This seems to contradict the R80.10 Release Notes:

Does managing older gateways work? Turns out, it should, with a couple of caveats:

If this is a fresh installation of R80.10, or if you've upgraded your Internal CA to a SHA-256 key, the oldest version of Security Gateway that you can manage is R71. This is because older gateway versions do not support SHA-256 certificates for the Internal CA (ICA). Refer to: SHA-1 and SHA-256 certificates in Check Point Internal CA (ICA)
While it may technically work, managing gateway versions prior to R75.20 is still unsupported.

At a future date, options for managing these unsupported products will be removed.

Re: Managing Unsupported Gateways with Check Point R80.10

_Val_ — Thu, 10 Aug 2017 09:05:28 GMT

IMHO, Check Point should push non-supported older versions out much more aggressively. Considering all versions below R77.30 are now out of support, only only makes sense to cut off old and obsolete R75 and downwards. people on the field had almost a decade to upgrade, or even more than that, in case of R70

Re: Managing Unsupported Gateways with Check Point R80.10

PhoneBoy — Thu, 10 Aug 2017 15:50:02 GMT

R70 came out in 2009, so not quite 10 years

As noted, the plan is to completely remove support for these older gateways in the future.

Re: Managing Unsupported Gateways with Check Point R80.10

_Val_ — Thu, 17 Aug 2017 06:45:47 GMT

Right. This changes everything 🙂

Re: Managing Unsupported Gateways with Check Point R80.10

Moti — Sun, 20 Aug 2017 17:40:01 GMT

Think of it as windows XP that even though Microsoft decided justifiably to end support there are still millions who didn't upgrade (we say it in wannacry;)

Re: Managing Unsupported Gateways with Check Point R80.10

_Val_ — Thu, 07 Sep 2017 07:46:19 GMT

microsoft never pushed customers to upgrade with maintenance plans and software subscriptions. CP does it actively. Unsupported GWs are just that, unsupported. There is no justifiable case to have a 10 year old security device, unless you live in a cave