The requirement to adjust the Information Security Regulator

[Aleksey139180]

Colleagues, good afternoon
We have received a request from the information security regulator
I'm quoting exactly
@ Ensure that the sha2 hash function is used for signing certificates. Use the sha1 hash function only if it is necessary to ensure compatibility with outdated software. Do not use md2 and md5 hash functions@@
Can you tell me how to check these requirements at check point?

[simonemantovani · Accepted solution]

I think you should start from this SK: https://support.checkpoint.com/results/sk/sk103840

In my opinion, but anyone could correct if I'm wrong, you should verify these aspects if used:

• vpn site-to-site with certificate.
• platform portal certificate.
• HTTPS inspection certificate.
• UserCheck certificate.
• SAML portal certifica.
• and everything else feature that could use certificate on your Check Point infrastructure.