topic Re: Activating Compliance Blade in Firewall and Security Management

Activating Compliance Blade

DorMashiach — Tue, 22 Jun 2021 20:38:44 GMT

Compliance Blade continuously monitors your Check Point Gateways, Blades, OS, policies, and configuration settings against a library of security best practices, highlighting poor configuration settings and security weaknesses in real-time.

Please follow the steps in the video below to activate Compliance Blade on your Security Management:

Re: Activating Compliance Blade

Saul_Goodman — Thu, 21 Jul 2022 02:01:38 GMT

Hi,

Does it support standalone deployment?

Re: Activating Compliance Blade

jnra — Thu, 21 Jul 2022 02:14:56 GMT

I have the same question.

Re: Activating Compliance Blade

jnra — Thu, 21 Jul 2022 05:56:49 GMT

I have opened a TAC case regarding this. TAC replied that it is supported since the limitation was not seen on the documentations.

Re: Activating Compliance Blade

_Val_ — Thu, 21 Jul 2022 09:29:35 GMT

@Saul_Goodman @jnra yes it does

Re: Activating Compliance Blade

Saul_Goodman — Sat, 30 Jul 2022 11:17:27 GMT

Hi Val,

Can you provide the right SKU for the Compliance Blade on standalone deployment?

Re: Activating Compliance Blade

Corinne_Vakulen — Sun, 31 Jul 2022 08:58:12 GMT

Hi, it depends on the number of GWs running. The license should be equal or higher than the active number of GWs.

For example, if you are running 2 GWs, you need to pick the 5GW license: CPSB-COMP-5-1Y. We have 5,10,25, 50,77 etc...

I hope it helps.

Corinne

Re: Activating Compliance Blade

Saul_Goodman — Sun, 31 Jul 2022 10:38:41 GMT

Does CPSB-COMP-5-1Y SKU apply to standalone deployment?

Re: Activating Compliance Blade

Corinne_Vakulen — Mon, 01 Aug 2022 06:41:46 GMT

Compliance is a blade integrated into our Management. You can't run it without Management if this is your question.

Corinne

Re: Activating Compliance Blade

ERIK_PEREZ1 — Wed, 19 Oct 2022 15:39:37 GMT

The late answer is yes it supports it but it consumes more ram memory.
Greetings.

Re: Activating Compliance Blade

anstelios — Tue, 25 Oct 2022 13:23:48 GMT

How do you enable compliance blade on Smart-1 Cloud?

Re: Activating Compliance Blade

Chris_Atkinson — Tue, 25 Oct 2022 13:33:05 GMT

If your license is one that includes it e.g. CPSM-CLOUD-GW-SME-COMP-1Y then you should be able to simply enable it on the Management object in SmartConsole and install database (menu option).

Re: Activating Compliance Blade

anstelios — Tue, 25 Oct 2022 13:37:57 GMT

I am asking about Smart-1 Cloud specifically because there is no object for mgmt server in "Gateways & Servers". '

Should we use the generic "Management_Service" object for this?

Re: Activating Compliance Blade

Dario_Perez — Tue, 25 Oct 2022 13:42:08 GMT

Management are not available from Gateways and Server but it does from Network Objects Tabs.

Is not supported changed, Management should be came according your license, if the blade is not enable you must rise a ticket with TAC for it.

Re: Activating Compliance Blade

Chris_Atkinson — Tue, 25 Oct 2022 14:08:21 GMT

I'm sure it worked this way when I last tested it on R81 Smart-1 Cloud but please take it with TAC per Roman's updated advice.

Re: Activating Compliance Blade

Michaeli — Tue, 21 Mar 2023 09:58:47 GMT

Will this automatically start a 30 day trial for customers that do not have Compliance yet?

Re: Activating Compliance Blade

Corinne_Vakulen — Tue, 21 Mar 2023 12:13:07 GMT

Hi, you will be able to activate Compliance ONLY if you have a valid license. For a 30 days trial license, you will need to download the license from the following CP web site: https://usercenter.checkpoint.com/ucapps/prodeval?source=publicsite&prodName=sandblast. Please pick the ALL-IN-ONE-EVALUATION LICENSE.

Re: Activating Compliance Blade

Michaeli — Tue, 21 Mar 2023 13:20:17 GMT

Thank you Corinne.