topic Re: Updatable Object for Checkpoint services in Firewall and Security Management

Updatable Object for Checkpoint services

Kaspars_Zibarts — Fri, 23 Apr 2021 06:13:16 GMT

Here's a million dollar question (or maybe $5)

what's missing on the list of Updatable Objects below? Where's Checkpoint services? Ones that are listed here sk83520

Of course you could create FQDN objects manually or a custom application category with URLs included but that maens manual maintenance. Would be so nice to have a pre-built object that's maintained by CP themselves! Have great friday!

Re: Updatable Object for Checkpoint services

Wolfgang — Fri, 23 Apr 2021 09:29:06 GMT

Yeah @Kaspars_Zibarts this would be really nice to have.

Same for enhancement of the "HTTPS services - bypass"-object for known problematic sites from Several HTTPS web sites and applications might not work properly when HTTPS Inspection is enabled on Security Gateway,

not only HTTPS Inspection bypass list object for R80.40 and higher

Re: Updatable Object for Checkpoint services

genisis__ — Fri, 23 Apr 2021 16:32:29 GMT

I've banged on about this as well to Checkpoint, its completely stupid of Checkpoint not to include there own services as part of this.

Re: Updatable Object for Checkpoint services

Nadav_Feigenbla — Sun, 25 Apr 2021 09:07:26 GMT

Hello @Kaspars_Zibarts , @genisis__ et all,
We are targeting to release updatable object for Check Point online services in a matter of several weeks.
I appreciate the product feedback!

@Wolfgang, I am taking internally with team to see which of the domains in SK can be promptly added to "optional bypass" section in object.

Regards,
Nadav Feigenblat

Re: Updatable Object for Checkpoint services

genisis__ — Sun, 25 Apr 2021 09:14:53 GMT

Hi Nadav,

This is really positive! We all look forward to this.

One small think, not sure if your the correct person to highlight this to. In R81 Jumbo 25 there is an issue where trusted GUI client is no longer authorised.

We have specified a subnet rather hosts as Allowed clients, which is a supported approach. In this Jumbo a host within this subnet is not authorised to access the SMS; we resolved this by installing JHFA23 instead.

I have raised a TAC case. TAC have requested I add host addresses. I don't believe this is the correct approach. The approach in my option should be:

- Acknowledge the fault

- Create a bug id

- resolve the fault

- Pull JHFA25 (or update it as its ongoing), and release a new Jumbo.

Re: Updatable Object for Checkpoint services

Ofer_Barzvi — Sun, 25 Apr 2021 13:15:07 GMT

Hello @genisis__,

There is indeed a bug in JHF 25 when connecting from an IP that not explicitly defined in the Trusted Clients list and next take (planned to be released in few days) will include a fix for this.

sk173026 about the issue was created and will be released ASAP.

Regards,

Ofer Barzvi

Re: Updatable Object for Checkpoint services

genisis__ — Sun, 25 Apr 2021 15:52:31 GMT

Awesome! Thanks for confirming.

b.t.w I can't find the SK?

Re: Updatable Object for Checkpoint services

genisis__ — Sun, 25 Apr 2021 15:51:15 GMT

In this new update, are there plans to increase the number of updatable objects? Example I think would be useful to have the following:

Zoom

WebEx

Cisco Meraki Cloud

Fortigate Cloud

PaloAlto Cloud

Re: Updatable Object for Checkpoint services

Nadav_Feigenbla — Sun, 25 Apr 2021 15:59:21 GMT

The new update is targeted to release 3 common requests we get -
1. Check Point online services
2. Github services
3. Zscaler services

Regarding Zoom & Webex - both are already available as updatable objects.

Regarding Cisco/Fortinet/Palo Alto cloud - we didn't get this request till now and we can surely evaluate it for next rounds.

Nadav

Re: Updatable Object for Checkpoint services

genisis__ — Sun, 25 Apr 2021 16:06:24 GMT

Great! I think the other clouds would be good to encompass as these are common, equally I would hope that the Checkpoint Cloud would be integrated into the other vendor security solutions as well.

Re: Updatable Object for Checkpoint services

the_rock — Sun, 25 Apr 2021 23:40:59 GMT

Good point there : ). I will check for my own reference if this looks any different in my R81.10 lab.

Re: Updatable Object for Checkpoint services

Abd_S81 — Thu, 29 Apr 2021 12:32:59 GMT

Perhaps also good to add status of connectivity or a version number of some sort in the Updateable Object window or last connected date/time . Actually similar to a data center object which has "test connectivity". This way it is confirmed status is green or red of the Updateable objects itself incase there is a loss of network connectivity or updateable objects are not getting updated for some reason.

Re: Updatable Object for Checkpoint services

genisis__ — Thu, 29 Apr 2021 13:53:42 GMT

I like it!

Re: Updatable Object for Checkpoint services

the_rock — Thu, 29 Apr 2021 14:07:20 GMT

Looks exactly the same on R81.10...no change.

Re: Updatable Object for Checkpoint services

Paramjeet_Singh — Tue, 18 May 2021 08:06:36 GMT

Hi Nadav,

Any idea from when Updatable objects for Github will be available.

Paramjeet

Re: Updatable Object for Checkpoint services

Micky_Michaeli — Thu, 27 May 2021 11:42:03 GMT

Hi,

We just released a new Updatable object for Check Point's security online services called "Check Point Services".

I'll update on the additional two new objects for Github services and Zscaler services release (targeted to be released in few weeks).

Regards,

Micky

Re: Updatable Object for Checkpoint services

_Val_ — Thu, 27 May 2021 11:47:21 GMT

@Micky_Michaeli great news! Any SK about this?

Re: Updatable Object for Checkpoint services

Wolfgang — Thu, 27 May 2021 11:54:03 GMT

Excellent! I like these updatable objects 😊

Re: Updatable Object for Checkpoint services

genisis__ — Thu, 27 May 2021 12:25:37 GMT

Finally!!!!

Re: Updatable Object for Checkpoint services

genisis__ — Fri, 28 May 2021 11:26:31 GMT

Do we know when other updatable objects will be added, specially thinking of Fortigate Cloud Services, Cisco Cloud Services, Palo Alto Cloud Services.