topic Re: IPS Update and Policy installation in Firewall and Security Management

IPS Update and Policy installation

civoulkidis — Fri, 26 Nov 2021 13:53:04 GMT

Hi,

I was wondering if I need to install the policy after the auto scheduled IPS update , in order to be effective in my Security Gateways(R80.40)?

Re: IPS Update and Policy installation

the_rock — Fri, 26 Nov 2021 13:59:27 GMT

No you do not, those are updated automatically if you set them that way and no need to install policy.

Re: IPS Update and Policy installation

Timothy_Hall — Fri, 26 Nov 2021 15:40:02 GMT

Assuming it is a new install of R80.40, or was a new install for at least R80.20 @the_rock is correct. However if your SMS started life in R80.10 or earlier and was upgraded into R80.40, it may still be set for IPS updates to be manually performed by an administrator which will require a policy install to take effect. Here is the coverage of this topic from my IPS/AV/ABOT Immersion course which shows the settings that you will need to check:

Re: IPS Update and Policy installation

civoulkidis — Mon, 29 Nov 2021 08:02:32 GMT

Can you please explain the below screenshots?

I get a warning in order to install the policy.

Re: IPS Update and Policy installation

the_rock — Mon, 29 Nov 2021 11:51:07 GMT

Its just cosmetic...run ips stat on gateway to see IPS version. Reboot always fixes that warning.

Re: IPS Update and Policy installation

civoulkidis — Tue, 30 Nov 2021 11:40:25 GMT

I installed the policy and the warning disappeared.

Re: IPS Update and Policy installation

civoulkidis — Tue, 14 Dec 2021 10:23:36 GMT

As you can see in the picture below, I received a notification about a new vulnerability.

In the 2nd step of the official CheckPoint guide, I have to install the policy in all gateways in order to be protected,

Re: IPS Update and Policy installation

KomisarzRyba — Wed, 28 Aug 2024 13:15:25 GMT

Hello,

Installing the policy does not solve the issue. The command result shows that IPS is not up to date. What else should I do?