The CheckMates Blog

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Community Highlights

Here are the threads to watch from the last week:

Firewall Rules Optimization for CPU and Network Throughput

Does grouping rules together improve performance? Not necessarily.

IPS Version 2 Signatures

What are they?

Improved User Experience for Zero Day Attack Prevention in R80.30

See how it works.

Blocking List of Domain Names with R80.10

What's the best way to do it?

Ansible-Based Automation for Check Point Management Server and Gateways

Leverages the R80.x Management APIs and the Gaia APIs.

Best Practices for Inline Layers

How to best leverage/use them.

IPS Protection for CVE-2019-0708

Patch your systems and apply this IPS signature.

Postman Collection for R80.30

For testing the R80.30 APIs.

Upcoming Events

We are now maintaining our event calendar in Google Calendar.
You can browse our calendar of events here: CheckMates Calendar 
Here's where you can find @Valeri_Loukine and I over the next few weeks

• 6th June 2019: R80.30 Technology Update
• 18th June 2019: CheckMates Live Estonia with @Valeri_Loukine 
• 19th June 2019: SD-WAN Security TechTalk
• 20th June 2019: CheckMates Live Nashville with @PhoneBoy 
• 25th June 2019: CheckMates Live Greece with @Valeri_Loukine 
• 27th June 2019: CheckMates Live Romania with @Valeri_Loukine 
• 17th July 2019: Maestro TechTalk: New Features, Best Practices, and Performance Aspects

If you would like a CheckMates Live event in your area, get in contact with us: checkmates@checkpoint.com 

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

CheckMates on a Yacht!

@Moti, @Amit_Sharon, and I were in Miami for CPX, which was held on the Seafair Mega Yacht! Amit caught me in action at the booth:

Moti gave his keynote:

Community Highlights

Here are the threads to watch from the last week:

CheckMates Member of the Month for May 2019: Maarten Sjouw

Congratulations and thank you for your ongoing contributions to the community, @Maarten_Sjouw !

CheckMates GO Episode 4: Threat Intelligence

Are you enjoying our new podcast? Let us know!

Moving Gateway to New Management and Importing Old Ruleset

Topic came up again in a different thread, so re-highlighting this one.

R80.10 User Mode Firewall and Performance Impact

Our VP of Products Dr. Dorit Dor weighed in on this thread. Seems in R80.30 with the 3.10 kernel, this is the default for all platforms and it will bring some performance benefits.

Duplicate Services: Which One Will Be Used?

Depends on the rule that matched the connection.

SmartMove

Our tool to migrate to Check Point from other vendors has been updated to support Palo Alto Networks!

Legacy DHCP Relay Services When Upgrading to R80.x

You can leave the old ones there, but there are some benefits to moving to the new services.

Regarding CVE-2019-0708

We've had requests regarding an IPS signature for this particular CVE.

Installing Expansion Interfaces to a Cluster Member

An order of operations question.

How Packet Flow Works Inside the IPS Blade

For those who are curious...

Upcoming Events

We are now maintaining our event calendar in Google Calendar.
You can browse our calendar of events here: CheckMates Calendar 
Here's where you can find @_Val_ and I over the next few weeks

• 6th June 2019: R80.30 Technology Update
• 18th June 2019: CheckMates Live Estonia with @Valeri_Loukine 
• 19th June 2019: SD-WAN Security TechTalk
• 20th June 2019: CheckMates Live Nashville with @PhoneBoy 
• 25th June 2019: CheckMates Live Greece with @Valeri_Loukine 
• 27th June 2019: CheckMates Live Romania with @_Val_ 
• 17th July 2019: Maestro TechTalk: New Features, Best Practices, and Performance Aspects

If you would like a CheckMates Live event in your area, get in contact with us: checkmates@checkpoint.com 

It's that time of the month where we recognize our best members. Put your virtual hands together for @Maarten_Sjouw, our CheckMates member of the Month for May 2019!

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Community Highlights

Here are the threads to watch from the last week:

White Paper Publishing Project

Our SE community has developed a lot of white papers we are starting to publish on CheckMates. It's ~joe 2.0!

Check Point R80.30

Not surprisingly, it's been one of the most searched-for things on CheckMates...and it's finally here!

Moving Gateway to New Management and Importing Old Ruleset

It's manual work, but it can be done.

A Glimpse into Artificial Intelligence and Machine Learning

Latest in our CheckMates Nuggets series.

Anti-Spoofing on Interfaces Which Have Not Been Updated

What happens when you add an interface before you define the policy?

Any Tool to Build a Rulebase from an "Any Any Accept" Rule?

Not really, but the using the logs the right way can certainly help.

Customized fwm logexport

Did not realize this was possible. Which, considering how long fwm logexport has been around, is kinda amazing!

Using CSV to Bulk Add Objects -- Doubled Items

When you're adding objects that already exist by name or by IP...

Managing a Gateway over VPN

This well-covered topic has come up again.

Bypass HTTPS Inspection for a Custom URL

Likewise, this old thread has come up again.

Sharing a Session with GUI and Gaia Expert

You can "take over" a session created through mgmt_cli from SmartConsole...and vice versa.

Temporarily Disable Auto-Generated NAT Rules

Not really an easy way to do this, but there are some suggested workarounds.

Upcoming Events

We are now maintaining our event calendar in Google Calendar.
You can browse our calendar of events here: CheckMates Calendar 
Here's where you can find the CheckMates team over the next few weeks:

• 16th May 2019: CPX Miami
  • @Moti is giving a keynote, @PhoneBoy and @Amit_Sharon will be there too!
• 22nd May 2019: R80.30 Technology Update
• 18th June 2019: CheckMates Live Estonia with @_Val_ 
• 19th June 2019: SD-WAN Security TechTalk
• 25th June: CheckMates Live Greece with @_Val_ 
• 17th July 2019: Maestro TechTalk: New Features, Best Practices, and Performance Aspects

If you would like a CheckMates Live event in your area, get in contact with us: checkmates@checkpoint.com 

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Community Highlights

Here are the threads to watch from the last week:

New Releases

• R80.30 with Linux 3.10 Kernel Early Availability
• Google Cloud Platform High Availability Solution is GA
• CloudGuard SaaS April 2019 Upgrade

CheckMates GO Episode 3: Threat Intelligence

Wonder when I'm going to make my way onto one of these podcasts 😁

Do I Need Proxy Rule About the Stealth Rule?

Yup.

Manually Define Local VPN Domain Per Remote Peer

We'll make this something in SmartConsole soon, hopefully.

Is It Possible to Change Settings for How Application Control Works?

It's not an issue with Application Control per-se, but an issue with parsing certain HTTP traffic when Application Control is invoked.

Cannot Remove IPS Blade from Gateway Object

Make sure your Threat Prevention policy isn't too specific.

2200 Appliances and R80.20 Support

Assuming you have 4GB of RAM, it works.

Disk Space Management Seems Not to Be Working

Make sure to account for the 5% reserve that is typical in Unix filesystems.

Script to Delete A Specific Tag from All Objects

A case of "ask and you shall receive."

New Unified API Reference

Currently contains only Management and Gaia APIs, but will be updated to include the others soon.

Rulebase Audit Based on Date

Shows rules that are older than 365 days.

Upcoming Events

We are now maintaining our event calendar in Google Calendar.
You can browse our calendar of events here: CheckMates Calendar 
Here's where you can find @_Val_ and I over the next few weeks

• 16th May 2019: CPX Miami 
• 22nd May 2019: WatchTower Mobile Security Management TechTalk
• 18th June 2019: CheckMates Live Estonia
• 19th June 2019: SD-WAN Security TechTalk
• 17th July 2019: Maestro TechTalk: New Features, Best Practices, and Performance Aspects

If you would like a CheckMates Live event in your area, get in contact with us: checkmates@checkpoint.com