Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

[Aviv_Abramovich]

AI-driven developments like Mythos are set to significantly accelerate the exploitation of un‑hardened deployments, with increased focus on control planes, administrative access, and trust relationships.

For Check Point environments, this puts immediate emphasis on hardening management and gateways. As frontline enforcement points, ensuring they are hardened to the maximum should be a priority now.

We created a hardening document providing actionable guidance to help reduce attack surface and strengthen resilience as these threats evolve.

https://sc1.checkpoint.com/documents/Check_Point_Gateway_and_Management_Hardening/CP_Check_Point_Gat... 

[simonemantovani]

Thanks for this precioous guide.

[Danny · Accepted solution]

I created a SmartConsole Extension to automate the checks.

[simonemantovani]

Hero!

[PhoneBoy]

Even without the threat of Mythos, these are good best practices to follow.

[Seth_NY]

I recommend also checking weak or insecure ciphers, MACs, KEXs. Some of these are fixed under all current releases/jumbos.

https://support.checkpoint.com/results/sk/sk181879

More complete list for reference:

https://support.checkpoint.com/results/sk/sk182231

https://support.checkpoint.com/results/sk/sk82900

https://support.checkpoint.com/results/sk/sk170936

The challenge is some of these are messy to apply (will be missed most customer build process until a security scan hits them) and allegedly don't survive updates and JHFs.

@Danny might already have a took for this kind of check, didn't find one.