This Week in CheckMates 6 July 2018

[PhoneBoy]

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts:

• Twitter: @CPCheckMates
• Facebook: Check Point CheckMates
• LinkedIn: Check Point CheckMates

We also have a podcast now!

• SoundCloud: Check Point CheckMates Cyber Security Podcast
• Podcast RSS: https://community.checkpoint.com/podcastfeed 

Community Highlights

Aside from Valeri Loukine joining the team, here's what else happened on CheckMates this past week:

More on R80.20.M1

A few new threads highlighting features of R80.20.M1:

• SmartView: Accessing Check Point Logs from Web 
• New CloudGuard IaaS features with R80.20.M1 SmartConsole 
• Automate deployment of Indicators of Compromise (IOC) with a new API. 

Export Migration Tools 

What you need will depend on where you're starting from (OS) and where you're going to (version).

Identity Awareness issue 

Some issues with the MUH agent on a terminal server that were ultimately addressed by upgrading to the latest Jumbo Hotfix on R77.30.

Sam Rule and "sam: Failed to enforce inhibit rules" 

This is related to using the R80.x APIs to enforce SAM rules.

How to deploy Check Point AWS Quick Start  

A new "How To..... " Video‌ showing how easy it is to deploy Check Point CloudGuard in AWS.

Application blocked but where is the application? 

Application Control and URL Filtering are treated similarly, which might cause a policy issue or two if you don't account for it.

Reading logs in the Management API ?  

There isn't an "API" for this, but you can use Log Exporter. Or ye olde fw log.

Script to Automate GAIA Configuration backup  

This captures the Gaia OS configuration (with some caveats).

R80.10 SmartConsole Linking Custom Sub-Views 

Tip of the week right here!

https://community.checkpoint.com/thread/8408-checkpoint-firewall-admin-tasks 

If you're new to Check Point and taking over the administration of gateways, this thread has a few things you should do.

Upcoming Events

• 11th July 2018: TechTalk: Mid-Year Report - Top Wanted Malware of 2018 (so far)‌
• 18th July 2018: TechTalk: R80.20 Demo 
• 24th July 2018: Migrate to R80.10, Live in Vancouver, BC!
• 26th July 2018: Check Point CheckMates Live in Jackson, MS!