New Updatable Objects for Microsoft Intune, Zoom, and Okta

[PhoneBoy]

For gateways R80.20 and above, we have a few new Updatable Objects:

[Martin_Valenta]

would be possible to know which feed you use for Zoom Services?

[Stefan_Schmidt]

Hello,

we have R80.30 Tale 141 but I cannot see any of the new updatable objects. What could be the problem? Thank you

regards, Stefan

[_Val_]

Where do you look?

[Stefan_Schmidt]

Hello,

I solved this yesterday with

sk121877 - Package of Updatable Objects is missing on the Security Gateway

[_Val_]

I assume, you were looking under objects, while Updatable only appear when you are trying to add something to the rulebase.

[Stefan_Schmidt]

Hello,

no, some updateable objects were missing from the list, I did sk121877 - Package of Updatable Objects is missing on the Security Gateway and suddenly the list was complete.

[Scott_Chambers]

Was there any change to the support for these services, particularly with Zoom?   

I am using both Zoom and O365 updatable objects on a lab 80.40 gw/sms and I got this error on Friday on the validation portion of smartconsole on GW policy:

*****

6/12/2020 8:08 AM

'Zoom Services' is no longer supported.   Enforcing security for this object is not possible.  To dismiss this message, delete the object.

At: Zoom Services

*****

[Eduardo_Eiros · Accepted solution]

Hello

Probablly this is the solution

Regards

To resolve this issue, restart the CloudGuard controller by running these commands on the Security Management Server:

• cloudguard stop
• cloudguard start

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Scott_Chambers]

That was it! Thank you 🙂

[Jerry]

hi guys

just so you know that updatable object Zoom Services is completely dropping traffic to AWS and in particular to Amazon.co.uk (app/website).

I'm t-shooting it as we speak but it seems that this very object in R81 is completely melting down AWS communication for users.

anyone of you experienced such things recently (R81 only!) ?

Cheers

[PhoneBoy]

Is it being used in an allow rule or a block rule?

[Nadav_Feigenbla · Accepted solution]

Discussion went internally with @Jerry and @Meital_Natanson .

So just to sync up the forum - The Zoom feed used for updatable object is Zoom's recommendation for whitelisting Zoom service.
Some of the domains there are AWS domains, and hence using this object for drop rule can lead to AWS related drops.

Nadav