Check Point Live Patch

[Martijn]

Hi all,

This is a very good development by Check Point. Keep up the good work!

sk185114 - Check Point Live Patch (CPLP)

Does anyone know if environments not connected to the internet but using a Private Threat Cloud appliance can benefit from this feature?

Regards,
Martijn

[simonemantovani]

Well ... very interesting.

[Chris_Atkinson]

Hi Martijn

Have asked the question internally at a minimum so that the limitations can be updated...

Cheers.

[PhoneBoy]

My guess is it that the current PTC offering doesn't include this.

[Martijn]

Hi,

I have a TAC case open for the PTC question and it is a internal discussion at the moment.

I have checked the customer's environment and CPLP does not seems to be enabled on the gateway's using the PTC. The command #cplp is not recognized.

Checking the software repository on the PTC, the 'BUNDLE_URGENT_SECURITY_UPDATE_R8X' is not found on the hard disk of the PTC.

So it looks CPLP is not supported when using a PTC appliance. Let's see what the official statement will be.

Keep you posted.

Martijn

[Martijn]

Hi all,

I got the following answer from the TAC engineer:

"According to the information shared and discussed with the relevant teams, the deployment method should be transparent to the PTC. Gateways located behind the PTC are expected to receive the Urgent Security Bundle, which includes both the required live patches and the corresponding CPLP updates."

I will keep monitoring the customer's environment to see if this is the case.

Martijn