topic Re: Optimize vs Recommended Protection in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6628#M59325 <HTML><HEAD></HEAD><BODY><P>Thanks Dameon.</P><P></P><P>How does the Optimized profile differ from the Recommended Protection profile?</P><P></P><P>-Jason</P></BODY></HTML> Wed, 27 Sep 2017 12:52:58 GMT Jason_Dance 2017-09-27T12:52:58Z Optimize vs Recommended Protection https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6626#M59323 <HTML><HEAD></HEAD><BODY><P>Hi all.</P><P></P><P>Does anyone have a good document describing the differences in the default IPS profiles in R80.x?&nbsp; I use Recommended Protection on my&nbsp;R77.x gateways, but now I've upgraded management to R80 I was wondering if there was a benefit to changing tot he optimized profile on my R77.x gateways.</P><P></P><P>-Jason</P></BODY></HTML> Tue, 26 Sep 2017 19:52:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6626#M59323 Jason_Dance 2017-09-26T19:52:28Z Re: Optimize vs Recommended Protection https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6627#M59324 <HTML><HEAD></HEAD><BODY><P><A href="https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ThreatPrevention_AdminGuide/138383.htm">From the documentation</A>:&nbsp;</P><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P class="" style="color: #333333; background-color: inherit; text-decoration: none; margin: 6pt 0pt; padding: 0pt;">SmartConsole includes these default Threat Prevention profiles:</P><UL class="" style="color: #333333; margin-top: 3pt; margin-bottom: 0pt;"><LI class="" style="color: #000000; background-color: inherit; text-decoration: none; text-indent: 0cm; margin: 3pt 0pt 0pt; padding: 0pt;"><STRONG class="" style="color: inherit; background-color: inherit; font-weight: bold; padding: 0pt;"><STRONG class="" style="color: inherit; background-color: inherit; font-weight: bold; padding: 0pt;">Optimized</STRONG></STRONG><SPAN>&nbsp;</SPAN>- Provides excellent protection for common network products and protocols against recent or popular attacks</LI><LI class="" style="color: #000000; background-color: inherit; text-decoration: none; text-indent: 0cm; margin: 3pt 0pt 0pt; padding: 0pt;"><STRONG class="" style="color: inherit; background-color: inherit; font-weight: bold; padding: 0pt;"><STRONG class="" style="color: inherit; background-color: inherit; font-weight: bold; padding: 0pt;">Strict</STRONG></STRONG><SPAN>&nbsp;</SPAN>- Provides a wide coverage for all products and protocols, with impact on network performance</LI><LI class="" style="color: #000000; background-color: inherit; text-decoration: none; text-indent: 0cm; margin: 3pt 0pt 0pt; padding: 0pt;"><STRONG class="" style="color: inherit; background-color: inherit; font-weight: bold; padding: 0pt;"><STRONG class="" style="color: inherit; background-color: inherit; font-weight: bold; padding: 0pt;">Basic</STRONG></STRONG><SPAN>&nbsp;</SPAN>- Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance</LI></UL></BLOCKQUOTE><P>Optimized is the default in R80.x and generally only enables signatures that don't have critical performance impact.</P><P>Strict enables almost all signatures.&nbsp;</P></BODY></HTML> Wed, 27 Sep 2017 03:57:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6627#M59324 PhoneBoy 2017-09-27T03:57:30Z Re: Optimize vs Recommended Protection https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6628#M59325 <HTML><HEAD></HEAD><BODY><P>Thanks Dameon.</P><P></P><P>How does the Optimized profile differ from the Recommended Protection profile?</P><P></P><P>-Jason</P></BODY></HTML> Wed, 27 Sep 2017 12:52:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6628#M59325 Jason_Dance 2017-09-27T12:52:58Z Re: Optimize vs Recommended Protection https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6629#M59326 <HTML><HEAD></HEAD><BODY><P>Basic has a few more protections enabled than Default, but is designed to have minimal performance impact.</P><P>Strict has more protections enabled than Recommended--almost all of them, in fact--and will have a performance impact.</P><P>Optimized has less protections enabled than Recommended, providing a good balance between performance and security.</P></BODY></HTML> Wed, 27 Sep 2017 15:55:41 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Optimize-vs-Recommended-Protection/m-p/6629#M59326 PhoneBoy 2017-09-27T15:55:41Z