Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Tomer_Sole
Mentor
Mentor

R80.10 IPS Best Practices Guide

Hi everyone, in the following document you will find:

- What are the major changes with IPS in R80.10 Security Management and Gateway.

- How can we set up an initial IPS configuration that gets regularly updated

- How can we tune our IPS to our organization's needs.

I would like to thank Omer Shliva for his efforts on this document. We will monitor this thread for questions.

PDF: http://downloads.checkpoint.com/dc/download.htm?ID=59099

HTML Frameset: https://sc1.checkpoint.com/documents/R80.10/IPS_Best_PracticeGuide/IPS_Best_PracticeGuide/html_frame...

 

9 Replies
G_W_Albrecht
Legend Legend
Legend

Thank you a lot - this really is brand new 😉

CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
Martin_Raska
Advisor
Advisor

Hello,

check also:

sk43733 How to measure CPU time consumed by IPS protections

sk110737 IPS Analyzer Tool - How to analyze IPS performance efficiently

BR

Martin

0 Kudos
Omer_Shliva
Employee
Employee

Hi Martin,

Thank you for your comment. You can find this information on page 16 of our guide.

Daniel_Westlund
Collaborator
Collaborator

Is there a way in R80.10 to choose which resources IPS protects, ie, protect resources I define as internal?

0 Kudos
Martin_Raska
Advisor
Advisor

You can do it via Threat Prevention policy with Protected scope field.

0 Kudos
Daniel_Westlund
Collaborator
Collaborator

Thanks.  Looks like I need to wait until I get my gateway onto R80.10 as it failed to validate that attempt for R77.30.

0 Kudos
Martin_Raska
Advisor
Advisor

Yes, because you can have only one profile per GW in R77.30

0 Kudos
D_W
Advisor

Raj_Khatri
Advisor

When will the best practice guide for R80.20 be released?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events