cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

sandbox TE1000X

Jump to solution

Have this kind appliance some of Kaspersky antivirus engine ? If Yes, can we uninstall this part ?

1 Solution

Accepted Solutions
Employee++
Employee++

Re: sandbox TE1000X

Jump to solution

Hi Olga,

Sorry for the delayed answer.

The procedure mentioned for Kaspersky removal in sk118539 will also remove Kaspersky from the Threat Emulation (Sandbox) part. Please remember that after Kaspersky removal AV malware detection on our gateways will still work at the same security level/detection rate but without involving Kaspersky components anymore. So there is no security impact !


So to summarize:

  1. For existing R80.10/R77.30 installations there is a CPUSE package to remove Kaspersky (Check Point <VERSION> Hotfix for sk118539 (Kaspersky Anti-Virus Removal) )
  2. For new R80.10 installations there is a dedicated ISO without Kaspersky components (R80.10 image Take 462 or higher)
  3. For Endpoint Anti-Malware you can disable the AV blade (How to disable and remove Kaspersky Labs components from Check Point Endpoint Anti-Malware Blade ) but we plan to have an endpoint AV blade not related to Kaspersky in the near future

Regards Thomas

4 Replies
Employee++
Employee++

Re: sandbox TE1000X

Jump to solution

Hi Dariusz,

Check How to disable and remove Kaspersky Labs components from Check Point Security Gateway 

There are also TE specific notes.

Regards Thomas 

0 Kudos
Olga_Kuts
Silver

Re: sandbox TE1000X

Jump to solution

Hi Thomas,

This question also interests me. The sk has only notes for endpoint clients with an Ant-Malware blade, but there is nothing about the sandblast appliance. Do we need to install a fix if we use sandblast agents and a local sandblast appliance TE1000X?

0 Kudos

Re: sandbox TE1000X

Jump to solution

Hi Olga,

Looks like in your message you're referring to another sk - How to disable and remove Kaspersky Labs components from Check Point Endpoint Anti-Malware Blade.

I believe, the second section in the sk118539 is exactly what you are looking for - Action plan for versions R77.30 and above (Disable & Remove).

You need to install Check Point <VERSION> Hotfix for sk118539 (Kaspersky Anti-Virus Removal) as in picture below.

0 Kudos
Employee++
Employee++

Re: sandbox TE1000X

Jump to solution

Hi Olga,

Sorry for the delayed answer.

The procedure mentioned for Kaspersky removal in sk118539 will also remove Kaspersky from the Threat Emulation (Sandbox) part. Please remember that after Kaspersky removal AV malware detection on our gateways will still work at the same security level/detection rate but without involving Kaspersky components anymore. So there is no security impact !


So to summarize:

  1. For existing R80.10/R77.30 installations there is a CPUSE package to remove Kaspersky (Check Point <VERSION> Hotfix for sk118539 (Kaspersky Anti-Virus Removal) )
  2. For new R80.10 installations there is a dedicated ISO without Kaspersky components (R80.10 image Take 462 or higher)
  3. For Endpoint Anti-Malware you can disable the AV blade (How to disable and remove Kaspersky Labs components from Check Point Endpoint Anti-Malware Blade ) but we plan to have an endpoint AV blade not related to Kaspersky in the near future

Regards Thomas