Product Announcements

A new GA SmartConsole (Build #67) for R80.20 (Replacing Build #55)  is available. Please refer to sk137593

Release Highlight:

• Windows 10 with .Net framework 4.8 is not properly updated after scrolling up or down the name column in lists, combo box, pickers etc. 

For full content - please refer to sk137593 

Thanks, 

Release Management team  

Hi all,

We are happy to announce the general availability of Cloud Management for SandBlast Agent.

The service is available at https://portal.checkpoint.com/register/endpoint

Cloud Management for SandBlast Agent

The new Cloud Management for SandBlast Agent provides many advantages for our customers, partners, and Check Point’s technical teams by enabling quicker, smoother POCs and the spin-up of production environments within minutes.

Main key features:

• Hosted on Amazon Web Services (AWS), secured by Check Point.  
• Low latency by using USA or Europe AWS regions.
• Very simple, easy and quick creation of a new tenant management environment.  
• No installations and no pre-requisite required.  
• Fully managed service by Check Point, removes the overhead of managing and maintaining the management server by our customers
• Cloud management for SandBlast Agent is included in the package license with no additional fee.

Our customers will no longer need to worry about setting up, deploying, and maintaining a server. SandBlast Agent cloud management is part of the Infinity Portal which is another major step to making the Infinity architecture a reality.

In the past few months, Cloud Management for SandBlast Agent deployed successfully in dozens of POCs and live production with very good feedback from our customers and partners. 

We strive to continue the good momentum with this release!!

Collateral

Additional information on cloud management for SandBlast Agent is available.

SandBlast Agent Cloud Management Administration Guide

R80.20 Jumbo HF Take #91 is now our GA take (replacing take 87).

This take will be available for download to all via CPUSE (as recommended) and via sk137592.

Main content:

• Added ability for R80.20 Security Management or Multi-Domain Server to manage R80.30 Security gateway.
• Added support for 16000 and 26000 appliances.

Thanks 

Release Managers group 

Hi all,

We recently released SandBlast Agent E81.20.

E81.20 introduces new features, stability and quality improvements.

A complete list of improvements can be found on the release Secure Knowledge sk158912

New Cloud based Zero Phishing

Phishing is still one of the major attack vector and a common initial attack vector in multi-vector attacks campaign.

Zero Day phishing protection is part of SandBlast offering and until now was based on local analysis on the agent.

We are happy to introduce a major enhancement to the Zero-Phishing protection which now powered by Check Point Cloud and enhanced by new Machine Learning algorithm.  

Phishing detection is based on:

• Static analysis – URL reputation check against Check Point’s cloud threat intelligence to see if the URL is known to be malicious or not.
• Dynamic analysis – Cloud Machine Learning based inspection analyze the page in real-time using multiple indicators (domain, Geo location, text, images, favorite icon, and many others indicators) to confirm the authenticity of the website.

The new enhancements will improve the detection rate and reduce the fault positive of new zero day phishing sites

Malicious scripts protection before execution

Behavioral Guard engine detect and prevent complex file-less attacks and malicious scrips.

E81.20 introduces enhancements to the Behavioral Guard engine. This version blocks malicious scripts like PowerShell, prior to the execution (In earlier releases, Behavioral Guard detected and terminated the scripts after their execution).

Performance improvements

Performance improvements is an on-going effort with numerous enhancements introduced in previous SW releases.   

E81.20 includes some major performance improvement, overall performance improved in average of 30%.

New VPN capabilities

• Ability to match the VPN user to the logged-in Windows user and display it in the username field of the connect dialog.
• Ability to disable implicit SDL when SDL is enabled.
• Ability to choose a customized Display Name when creating a site from a link.
• Ability to enable the Connect button before any response is written.

Hi,

 R80.30 Jumbo HF Take #19 is now our GA take.

This take will be available for download to all via CPUSE (as recommended) and via sk153152

Release Highlight:

• 1^st Jumbo supported for R80.30 Main train release
• Fix for TCP SACKK security Alert
• Important Note:
  • This Jumbo does not support 16K and 26K appliances series (Linux 3.10)
  • The next Jumbo that will be released in the upcoming weeks will add support to these appliances as well.

Additional information can be found in sk153152

Thanks,

RLM Group