topic Re: R80.20 on TE100X - Recommended? in Firewall and Security Management

R80.20 on TE100X - Recommended?

dj0Nz — Mon, 25 Feb 2019 15:58:26 GMT

Hi,

I have been asked to upgrade a TE100X system from R77.30 to R80.20.

Our customer heard "rumors" that it will run a lot better with R80.20.

I am careful with such things.

Does anybody have a TE100X running with R80.20? Is it recommended by Checkpoint itself?

Thanks.

Michael

Re: R80.20 on TE100X - Recommended?

William_Douglas — Mon, 25 Feb 2019 18:50:58 GMT

Hi,

To my knowledge the GAiA version for TE Appliances is still at R77.30. You can integrate it with R80.20, but to my knowledge there is no R80.20 for TEX.

Re: R80.20 on TE100X - Recommended?

Martin_Raska — Tue, 26 Feb 2019 07:51:55 GMT

You can use R80.20 and according to what I've heard it should perform much better regarding MTA

Starting from November 2018, has been added support for Check Point R80.10 and R80.20 - sk106210

Re: R80.20 on TE100X - Recommended?

Chinmaya_Naik — Tue, 26 Feb 2019 08:08:22 GMT

#Chinmaya Naik

Re: R80.20 on TE100X - Recommended?

dj0Nz — Tue, 26 Feb 2019 09:23:42 GMT

Thank you very much.

But the question was not if it is supported, but if it can be recommended.

I also heard that MTA should perform much better and that's why we're considering an update.

But I don't know anyone who can confirm this, because he has already seen it in productive operation.

Re: R80.20 on TE100X - Recommended?

Chinmaya_Naik — Tue, 26 Feb 2019 10:28:32 GMT

We are using the R80.20 ISO for TE for POC purpose and we also enable the MTA and its working fine. But still, some use cases are pending from our end.

Link: Block Malicious Unknown File type attachment (MTA) (TE) (R80.20)

We still not using R80.20 on production. but in R80.10 is running on production for some customer and its working fine.

Please find the below enhancement for MTA in R80.20 ISO

MTA (Mail Transfer Agent)
- MTA monitoring, e-mails history views and statistics, current e-mails queue status and actions performed on e-mails in queue.
MTA configuration enhancements
- Setting a domain object as next hop.
- Ability to create an access rule to allow SMTP traffic to a Security Gateway.
- Create a dedicated Advanced Threat Prevention rule for MTA.
MTA enforcement enhancements
- Replacing malicious links in an email with a configurable template.
- Configurable format for textual attachments replacement.
- Ability to add a customized text to malicious e-mails' body or subject.
- Tagging malicious-mails using X-header
- Sending a copy of the malicious e-mail to a predefined recipients list

Thanks

#Chinmaya Naik

Re: R80.20 on TE100X - Recommended?

dj0Nz — Tue, 26 Feb 2019 13:53:48 GMT

Again, thank you very much, this helps a lot!

So to sum it up: No one is using R80.20 on a TE100X Appliance in production.

Maybe I'll give it a try. Have to ask the customer...

Re: R80.20 on TE100X - Recommended?

Chinmaya_Naik — Tue, 26 Feb 2019 14:04:41 GMT

Hii

We also put soon on production (R80.20) once we completed some usecases.

Please update in case any issue you face.

#Chinmaya Naik

Re: R80.20 on TE100X - Recommended?

William_Douglas — Tue, 26 Feb 2019 15:00:22 GMT

Thank you for the information.

Re: R80.20 on TE100X - Recommended?

dj0Nz — Tue, 26 Feb 2019 15:11:56 GMT

I asked our Sandblast Man at Checkpoint and was been told that there are a lot of MTA improvements in R80.xx. See Mail Transfer Agent Update - What's New

Re: R80.20 on TE100X - Recommended?

dj0Nz — Thu, 28 Mar 2019 11:38:56 GMT

Customer running on R80.20. No issues so far...