topic Re: Gaia Hardening for R81 in Firewall and Security Management

Gaia Hardening for R81

PhoneBoy — Thu, 11 Mar 2021 14:01:57 GMT

The document linked below describes the hardening of the Check Point Gaia operating system.
Components that are not necessary for a network security device, or that could cause security vulnerabilities, were removed.
Check Point Gaia R81 is based on Red Hat 7.6 version and the Linux kernel 3.10.0-957.
The applications removed from the operating system include X Windows, Office applications, games, and many other applications that are irrelevant to Firewall operations.
The document linked below describes the remaining packages and modifications to the system.

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_Hardening/Topics-GAH/Gaia_Hardening.htm

Re: Gaia Hardening for R81

HeikoAnkenbrand — Thu, 19 Nov 2020 07:49:57 GMT

But there are still a lot of packages missing.
For example openssl. This package has been modified by Check Point.

Re: Gaia Hardening for R81

Anthony_Kahwati — Thu, 11 Mar 2021 11:42:28 GMT

I'm in this process and also using the following as reference:

https://www.cisecurity.org/cis-benchmarks/

Scroll through list for Checkpoint

Accepted internally by our security team as a valid approach.... maybe not definitive but good as a complement to any other sources.

Re: Gaia Hardening for R81

Anthony_Kahwati — Thu, 11 Mar 2021 11:46:00 GMT

The link target seems to have been removed.

Re: Gaia Hardening for R81

PhoneBoy — Thu, 11 Mar 2021 14:02:24 GMT

I updated the original post with a corrected link.

Re: Gaia Hardening for R81

_Val_ — Thu, 11 Mar 2021 14:06:52 GMT

Yeah, the SK team is wreaking havoc 🙂