Prepare yourself for a new CheckMates challenge: "How To" Videos Competition on CheckMates

As part of our mission to share and discuss the best practices and expert tips on CheckMates, we are announcing "How To" Videos Competition. We are calling on all CheckMaters: customers, partners and Check Point employees, to create up to 10 minute long video explaining any technical aspect of Check Point Security systems.

What:

Chose a topic you want to share: best practices, configuration details or architectural solution for a specific product, software blade, or a feature.

How:

Make your video story or explanation with a white board or a live demo. Tape and edit your video to make it no longer than 15 minutes. Be creative.

Who:

Any CheckMates are welcome to participate.

Why:

To share your expertise, to help each other out, to have some fun and of course

to win prizes and awards!

When and where:

In February 2019, we will make an additional announcement regarding the criteria, hosting details, and awards.

Stay tuned and start recording your video!

We now have a new Partners‌ space where only registered partners and Check Point Employees have access.

This is to enable discussion of Partner-specific tools and initiatives outside of the public view of the rest of the community.

Those of you whom are associated with partners should already have access to this space with no action required on your part.

If you don't have access to this space and feel you are entitled to do so, please contact me privately.

After I validate you are a partner in UserCenter, access can be granted.

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

• CheckMates in Russian - ЧекМейтс по-русски
• CheckMates en Français
• CheckMates Taiwan論壇

Christmas with the CheckMates Team

Happy Holidays from the CheckMates team!

Niran Turgeman‌ got us into the spirit by "elfing" us.

Community Highlights

Here are the conversations worth watching in the community:

R80.20.M2 Now Available 

Just in time for Christmas!

R80.20 security checkup report does not export 

There's a fix for this issue.

Domain-Based VPN with Dynamic Routing 

Can you disable the VPN routes? Yes you can.

Mapping Rule numbers from R80.20 to fwaccel stat output 

You can look at the compiled rulebase, but it might be in the backward compatibility directories.

How to see what firewall rules match some traffic 

This is when you're not sure what rule will match traffic.

SecureXL Connections Table 

Did you know SecureXL maintains its own connections table? Now you do.

Does R80.10 Identity Collector work with Cisco ISE 2.4 

Wasn't QAed, but it should work.

Reports on 730 Appliances  

Reports related to applications only work if the Application Control blade is enabled.

Update 15400 r77.30 to r80.20 

Have you done this? What's your experience?

Site-to-site vpn Tunnel to a non Checkpoint Gateway 

Debugging tips

BEYOND - Customer Success Hub 

We're still working through some issues with the new support hub.

Upcoming Events

• 9th January 2019: New Years Toast and Migrate to R80.20 
• 15th January 2019: Introduction to Check Point R80.x API in Memphis‌
• 5th March 2019: Check Point R80.20 Updates, Troubleshooting and Support Best Practices, Live in Bratislava!

And, of course, CPX 360 2019!

Hi CheckMates!

If you haven’t yet registered for CPX 360, the top cybersecurity event of the year ever to exist, NOW is your chance!

Join us this year to meet, learn and laugh with your fellow CheckMaters, Check Point experts and top cybersecurity professionals. From CyberTalks, Breakout Sessions, Awards and the CheckMates Scavenger Hunt, you wouldn’t want to miss out!

Register for CPX 360 before Friday, January 4th, and you’ll be given exclusive access to the CPX CheckMates Lounge where you can meet top Check Point R&D specialists and you’ll be entered into a raffle to WIN an Apple Watch 4!

Register below before Friday, January 4th:

• CPX Bangkok: Jan 21-23
  • CPX Las Vegas: Feb 4-7
  • CPX Vienna: Feb 18-21

To redeem your rewards, email The CheckMates Team with your registration confirmation.

Don't miss out, see you there!

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

• CheckMates in Russian - ЧекМейтс по-русски
• CheckMates en Français
• CheckMates Taiwan論壇

CheckMates in Belgium and Ireland

Valeri Loukine‌ and I did the last CheckMates events for 2018 in Belgium and Ireland. A great time was had by all.

"I'm not ready yet, guys!"

He won the Kahoot!

CheckMates will be at all three CPX 360 2019 event in January and February. See you there?

Community Highlights

Here are the conversations worth watching in the community:

BEYOND - Customer Success Hub 

We launched our new online portal for TAC cases! Check the thread for more details and share your feedback.

Two ISP's with two appliances 4800 R80.10 

And related thread: CheckPoint Cluster Failover Query. Bottom line: Both ISPs need to be available/reachable from both gateways.

Deploying E80.88 Packages with MDT Build 8450 

Nice video showing how to deploy the Endpoint solution.

id, ID and OE inspection points in R80.20 GA? 

If you're using fw monitor in R80.20, you'll see some different "inspection points." This thread explains.

R80.20 SecureXL drop template support 

Yes, they're still supported even though one doc suggested they weren't.

Finding Mobile Access concurrent user license level 

We made this much easier in R80.x.

Missing header X-chkp-sid in login? 

Make sure you're calling the correct API endpoint.

How can we block Nmap and other Port scanners 

SmartEvent, anyone?

Why does the wrong flag show up for an IP address in GeoBlocking? 

Never seen that myself, but makes sense that it could.

Installation & Upgrade problems from R77.x to R80.x 

A collection of upgrades that went successfully...and not.

Prevent low confidence Anti bot protection 

Update the Threat Prevention profile to block it.

Upcoming Events

• 9th January 2019: New Years Toast and Migrate to R80.20 
• 5th March 2019: Check Point R80.20 Updates, Troubleshooting and Support Best Practices, Live in Bratislava!

And, of course, CPX 360 2019!

Video Link : 10813

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

• CheckMates in Russian - ЧекМейтс по-русски
• CheckMates en Français
• CheckMates Taiwan論壇

CheckMates in the UK and Nashville

Valeri Loukine‌ did some internal evangelizing of CheckMates with our UK colleagues:

Meanwhile I did the last US-based event for the year in Nashville:

Next week, Val and I are teaming up to do the last CheckMates events for 2018 in Europe. 

Community Highlights

Here are the conversations worth watching in the community:

R80.20 Security Gateway with new Gaia based on kernel 3.10 is GA for CloudGuard and HP Gen10 ! 

Not fully supported on Check Point appliances yet, but it's coming. And very soon: on Scalable Platforms (44k/64k)!

https://community.checkpoint.com/people/a1f28a75-6e6d-4a5a-bff0-ccb164d07a86/blog/2018/12/06/r8020-m... 

Likewise, you can install R80.20 Management in AWS. Gateway? It's coming very soon.

https://community.checkpoint.com/community/infinity-general/appliances-and-gaia/blog/2018/12/06/new-... 

Doesn't even require you to upgrade to R80.20

HPS Emulation 

Another name for CPU-Level Threat Prevention.

NAT Templates - SecureXL 

Why they weren't enabled by default until R80.20.

The flow time of the logs seems different

Session consolidation is the likely culprit.

R80.10 Smart Console - how to view NAT properties for objects within a group 

Where to find the Object Explorer in R80.x.

DNS Trap 

How does it work?

How are security professionals influenced by analysts ? 

A little market research.

https://community.checkpoint.com/thread/10614-anti-virus-not-blocking-malicious-zip-doc-files 

Setting Resource Classification to Background mode can cause this.

Upcoming Events

• 11th December 2018: Check Point R80.20 Updates, Troubleshooting and Support Best Practices, Live in Zaventem 
• 13th December 2018: CheckMates Live! in Dublin!
• 9th January 2019: New Years Toast and Migrate to R80.20 
• 5th March 2019: Check Point R80.20 Updates, Troubleshooting and Support Best Practices, Live in Bratislava!‌

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

• CheckMates in Russian - ЧекМейтс по-русски
• CheckMates en Français
• CheckMates Taiwan論壇

CheckMates at Home

It's been a while since both Valeri Loukine‌ and I were not on the road somewhere. 

Valeri took some well-deserved time off, I stuck around the homestead.

No pictures to share.

Ok, maybe one:

Community Highlights

Here are the conversations worth watching in the community:

TechTalk: Dome9 Overview and Q&A 

If you missed our TechTalk on Dome9 and you're using Azure, AWS, or Google Cloud (or even thinking about it), watch the recording of this TechTalk!

R80.20.M1 SmartConsole coexisting with R80.20 

Portable SmartConsole to the rescue!

R80.20 - Portable SmartConsole + Tips and Tricks 

Speaking of portable SmartConsole...

Open Server to Appliance 

All the cool kids are moving the Check Point appliances from Open Server

Add new cores to gateway 

Speaking of Open Servers, if you add more licensed cores, this thread will be helpful.

ClusterXL maintenance 

Not cluster maintenance necessarily, but maintenance on the hardware around the cluster...

False Positive on logs (Sandblast Agent) on BANKING Sites 

Looks like a bug we fixed in an upcoming release.

New Tool: CPPCAP 

A new and improved "tcpdump" for Gaia OS.

No logging in Logging and Monitor tab 

If you have your management and log server separated, this thread is relevant.

New Appliance Sizing Tool. Do you like it? 

This thread is really only relevant to Partners who have access to the tool, which was recently updated.

Upcoming Events

• 6th December 2018: Migrate to R80.20, Live in Nashville!
• 11th December 2018: Check Point R80.20 Updates, Troubleshooting and Support Best Practices, Live in Zaventem 
• 13th December 2018: CheckMates Live! in Dublin!
• 9nd January 2019: New Years Toast and Migrate to R80.20