The CheckMates Blog - Page 11

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

CheckMates Go S02E10: APT41 and Living Off The Land

Hot off the presses is a new episode of CheckMates Go for your listening pleasure. @PhoneBoy talks with @Tim_Otis and @RaymondS from the Check Point Incident Response Team about a recent investigation that led to APT41, which led to a discussion about cyber attacks that "live off the land."

Community Highlights

Here's the threads to watch from the last week:

New Releases

• SandBlast Mobile 3.7 Released
• R80.40 is now Check Point's Default Version (Widely Recommend Release)
• R80.30 Jumbo Ongoing Take 210
• R80.30 Jumbo HFA GA Take 196
• MUH2 Support for R80.30 Now Available 
• SandBlast Now Product Brief

Other Topics

• Hidden Folder SandBlastBackup Has More Than 1GB of Files 
• Route Office365 Traffic Local and Not Over Remote Access VPN
• Using SAML Authentication with Identity Awareness Captive Portal
• New Kubernetes RBAC Services Supported by CloudGuard Dome9
• How to Easily Protect Yourself with Canary Tokens (HoneyTokens)

Upcoming Events

We have a number of events planned for the next several weeks

UserTalk with Eurowind Energy A/S

@Kim_Moberg will share with us how he uses and benefits from Check Point solutions including; Cloud solutions, Threat Prevention, endpoint and mobile security, SmartLog and SmartView, and more. You will also have the opportunity to ask Kim your pressing questions! Register now!

TechTalk: Improving Gateway Performance with Dynamic Workloads

In our next TechTalk scheduled for 10th June 2020 at 8am PDT/5pm CEST, we will talk about Dynamic Workloads, a new feature introduced in R80.40. It is aimed at automatically allocating system resources in order to self-optimize and match your traffic characteristics. Register now!

Virtual User Group Events

Given the current and evolving situation with Coronavirus, we are planning virtual events for the time being.
While anyone is welcome to register for a CheckMates Live Virtual Edition events, they are generally for a limited number of people with priority given to people in the specified geographic area.
If you don't see your area listed, please contact us and we'll be happy to arrange a session for your area!

Bookmark the CheckMates Calendar to have an up-to-date list of events at your fingertips!
If you attend CheckMates Live events, you can get CPE credit! 

• 2 June 2020: Carolinas: R80.x API Automation and Orchestration Best Practices
• 4 June 2020: DACH: Automation and Orchestration Best Practices
• 9 June 2020: France: Automatisation et Orchestration
• 18 June 2020: Iberia: HTTPS Inspection Best Practices

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Partner Community

Check Point Partners have been an integral part of CheckMates!
To better inform and equip our partners for success, we have created a CheckMates Partner community space.
Visit our Welcome Partners page for more details!

Community Highlights

Here's the threads to watch from the last week:

New Releases

• Mobile Access Blade with Clientless RDP/SSH: Early Availability
• Application Control Updates related to Web Conferencing Applications
• New Version of Check Point Terraform provider (v1.0.2)
• R80.40 Jumbo HFA GA Take 48
• R80.30 Jumbo HFA Ongoing Take 196
• R80.10 Jumbo HFA Ongoing Take 275

CloudGuard Topics

• Securing Serverless Functions with CloudGuard Workload 
• Secure Your Code and Docker Container Images with CloudGuard SourceGuard
• Cloud Feature Names
• Check Point IaaS, Terraform scripts and presentation for AWS Transit Gateway

Other Topics

• Quantum Appliances Technical Aspects TechTalk: Video, Q&A, & Slides 
• fw ctl zdebug failed to allocate memory
• Blink Upgrade with CPUSE
• ISP Redundancy on SMB Appliances
• Hotspot for Internet for Guest on 3200 Appliance
• Site-to-Site VPN (Policy Based) and Routing Behavior
• Identity Conciliation Behavior
• Supervision of Check Point Firewalls

Upcoming Events

We have a number of events planned for the next several weeks

TechDive: CloudGuard IaaS Deployment Options on Google Cloud

If you're interested in Google Cloud Platform (GCP), want to learn how to use the platform, and configure and deploy CloudGuard IaaS for several use cases, join @Shay_Levin in one of three sessions we're doing during the last week of May! More details and registration here:

• EMEA Registration Link   (25 May 2020, 10:00 AM London)
• Americas Registration Link  (26 May 2020, 11:00 AM New York)
• APAC Registration Link  (27 May 2020 01:00 PM Singapore)

Virtual User Group Events

Given the current and evolving situation with Coronavirus, we are planning virtual events for the time being.
While anyone is welcome to register for a CheckMates Live Virtual Edition events, they are generally for a limited number of people with priority given to people in the specified geographic area.
If you don't see your area listed, please contact us and we'll be happy to arrange a session for your area!

Bookmark the CheckMates Calendar to have an up-to-date list of events at your fingertips!
If you attend CheckMates Live events, you can get CPE credit! 

• 27 May 2020: Mid-South US: SandBlast Mobile
• 28 May 2020: California and Southwest: HTTPS Inspection Best Practices
• 29 May 2020: CZ/SK: HTTPS Inspection Best Practices
• 2 June 2020: Carolinas: R80.x API Automation and Orchestration Best Practices
• 4 June 2020: DACH: TailoredSafe
• 9 June 2020: France: Automatisation et Orchestration
• 18 June 2020: Iberia: HTTPS Inspection Best Practices

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Two New Episodes of CheckMates GO

We have two new episodes of the CheckMates GO for your listening pleasure:

• S02E08: Applied Lessons from Covid-19
• S02E09: How Covid-19 Changed The Cyber Threat Landscape

Community Highlights

Here's the threads to watch from the last week:

New Releases

• GAIA API version 1.4
• 1570R Rugged Security Gateway

Community Discussions

• Remote VPN Logs are Rewritten After Authentication Timeout in R80.20 
• Domain Objects (FQDN Mode) vs Custom Application/Sites 
• Replacing Licenses to Double Number of Licensed Cores
• Disable Anti-Spoofing from CLI
• E83.00 Endpoint Security Release and Browser Plugins
• HTTPS Inspection and sni.cloudflaressl.com 
• Use of mgmt_cli and 4 Eyes Review
• Increasing Performance and Use Cases for Separate IPS Profiles
• How to Identify a DDoS Attack on Check Point Appliances
• Disabling SecureXL on SMB Appliance R80.20

Upcoming Events

We have a number of events planned for the next several weeks

Next TechTalk: Technical Aspects of Quantum Appliances

On 20 May 2020, we will be talking about our new Quantum Security Gateways™ from the technical perspective, for better understanding of how they can provide ultra-scalable, power efficient protections against Gen V cyber threats. Register now!

TechDive: CloudGuard IaaS Deployment Options on Google Cloud

If you're interested in Google Cloud Platform (GCP), want to learn how to use the platform, and configure and deploy CloudGuard IaaS for several use cases, join @Shay_Levin in one of three sessions we're doing during the last week of May! More details and registration here:

• EMEA Registration Link   (25 May 2020, 10:00 AM London)
• Americas Registration Link  (26 May 2020, 11:00 AM New York)
• APAC Registration Link  (27 May 2020 01:00 PM Singapore)

Virtual User Group Events

Given the current and evolving situation with Coronavirus, we are planning virtual events for the time being.
While anyone is welcome to register for a CheckMates Live Virtual Edition events, they are generally for a limited number of people with priority given to people in the specified geographic area.
If you don't see your area listed, please contact us and we'll be happy to arrange a session for your area!

Bookmark the CheckMates Calendar to have an up-to-date list of events at your fingertips!
If you attend CheckMates Live events, you can get CPE credit! 

• 19 May 2020: New York and New England: HTTPS Inspection Best Practices
• 20 May 2020: Mid-South US: Dome9
• 21 May 2020: Georgia US: Remote Access Best Practices
• 27 May 2020: Mid-South US: SandBlast Mobile
• 28 May 2020: California and Southwest: HTTPS Inspection Best Practices
• 29 May 2020: CZ/SK: HTTPS Inspection Best Practices
• 2 June 2020: Carolinas: R80.x API Automation and Orchestration Best Practices
• 4 June 2020: DACH: TailoredSafe
• 9 June 2020: France: Automatisation et Orchestration
• 18 June 2020: Iberia: HTTPS Inspection Best Practices

Our marketing team is interested in your opinion on branding Check Point's upcoming virtual event series.
Please take this quick survey to provide your point of view: 

PLEASE CLICK HERE FOR THE SURVEY LINK

Appreciate your help

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

CheckMates GO: Detection Versus Prevention

The latest episode of our podcast has dropped! @Ashwin_Ram and I discuss the Detection mindset versus the Prevention mindset. 

Community Highlights

Here's the threads to watch from the last week:

Software Updates

• R80.40 JHF Ongoing Take 45
• SmartConsole R80.40 GA build 396
• R80.20.05 Build 1169 for 1500 Series Appliances
• Ansible Collection for Check Point v1.05
• Threat Prevention Portal Early Availability 

Community Discussions

• Ask Me Anything with Check Point Founder and CEO Gil Shwed
• Cloud Security Posture Management on Azure and AWS with Dome9 TechTalk
• R80.30 JHF Installation with fw fast_accel Enabled Fails
• Can You Deploy SandBlast Agent w/o Active Directory?
• Broken Pipe: Requested Input Buffer Too Big (SNX on Linux)
• Mobile Access VPN Users Can't Reach Internal Network
• Error When Trying to Replace Gateway with Cluster Object in Policies
• LEA vs Log Exporter to Send Logs to Splunk

Upcoming Events

We have a number of events planned for the next several weeks

Next TechTalk: Technical Aspects of Quantum Appliances

On 20 May 2020, we will be talking about our new Quantum Security Gateways™ from the technical perspective, for better understanding of how they can provide ultra-scalable, power efficient protections against Gen V cyber threats. Register now!

TechDive: CloudGuard IaaS Deployment Options on Google Cloud

If you're interested in Google Cloud Platform (GCP), want to learn how to use the platform, and configure and deploy CloudGuard IaaS for several use cases, join @Shay_Levin in one of three sessions we're doing during the last week of May! More details and registration here:

• EMEA Registration Link   (25 May 2020, 10:00 AM London)
• Americas Registration Link  (26 May 2020, 11:00 AM New York)
• APAC Registration Link  (27 May 2020 01:00 PM Singapore)

Virtual User Group Events

Given the current and evolving situation with Coronavirus, we are planning virtual events for the time being.
While anyone is welcome to register for a CheckMates Live Virtual Edition events, they are generally for a limited number of people with priority given to people in the specified geographic area.
If you don't see your area listed, please contact us and we'll be happy to arrange a session for your area!

Bookmark the CheckMates Calendar to have an up-to-date list of events at your fingertips!
If you attend CheckMates Live events, you can get CPE credit! 

• 12 May 2020: Poland: HTTPS Inspection Best Practices
• 13 May 2020: Mid-South US: IoT Security
• 19 May 2020: New York and New England: HTTPS Inspection Best Practices
• 21 May 2020: Georgia US: Remote Access Best Practices
• 28 May 2020: California and Southwest: HTTPS Inspection Best Practices
• 29 May 2020: CZ/SK: HTTPS Inspection Best Practices
• 18 June 2020: Iberia: HTTPS Inspection Best Practices

On 4th May 2020 (Star Wars day), we had an Ask Me Anything session with Check Point Founder & CEO. Find out what he believes to be the best practices for security during the era of Coronavirus as well as answered to your burning questions.

Content available to CheckMates members:

• Video
• Zoom Backgrounds

Selected Q&A will be shared in the comments shortly.
Video excerpt below.

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

CheckMates Search in SecureKnowledge is Back!

When you search in Support Center, you'll notice there's now a CheckMates tab:

This integration existed previously, but broke when we migrated to a different community solution last year.
It's now back and independently indexing the community.
if you run into any issues, let us know!

Community Highlights

Here's the threads to watch from the last week:

Software Updates

• SandBlast Now: CloudGuard IaaS TAP for AWS in Early Availability
• EA Program for new Mobile Access Portal
• CloudGuard Express/Shift Early Availability

Community Discussions

• CloudGuard Iaas and Aviatrix - Egress How-To Video 
• Identity Collector Requirements, re: Java 
• Increase VPN Authentication Timeout
• Last Step is Missing in R80.40 Upgrade Documentation for Log Exporter
• Show Changes Between Sessions in SmartConsole 
• Monitor VPN Users on Check Point Firewall with Netmiko, Python, InfluxDB, and Grafana 
• Long-Lived TCP Connections Got Timed Out Ungracefully

Next TechTalk: Secure Data Transformation During COVID-19

The various mandates in response to COVID-19 have companies encouraging, if not mandating, that people work from home, which means only critical staff can be at the office or in the datacenter. This has led to an increase in the use of the public cloud services from AWS and Azure. Whether the business is one on the front line of combating Coronavirus, or is a financial institution, a manufacturer, a logistics company, or any other vertical, organizations must maintain business continuity during their cloud journeys and continue to provide the same level of security regardless of being in the cloud or on-premises. There has been case after case where a simple mis-configuration in a cloud subsystem has led to data loss.

Our next TechTalk will be done by @Gregory_Pepper on May 6th at 8am Pacific/5pm CEDT and will cover how CloudGuard Dome9 can keep your data secure by ensuring that your public cloud is compliant, secure from attacks, and is protected against mis-configurations. Register Now!

Upcoming Virtual User Group Events

Given the current and evolving situation with Coronavirus, we are planning virtual events for the time being.
While anyone is welcome to register for a CheckMates Live Virtual Edition events, they are generally for a limited number of people with priority given to people in the specified geographic area.
If you don't see your area listed, please contact us and we'll be happy to arrange a session for your area!

Bookmark the CheckMates Calendar to have an up-to-date list of events at your fingertips!
If you attend CheckMates Live events, you can get CPE credit! 

• 4 May 2020: Ask Me Anything with Gil Shwed
• 5 May 2020: CheckMates Live Virtual Edition DACH
• 6 May 2020: CheckMates Live Virtual Edition Mid-South
• 12 May 2020: CheckMates Live Virtual Edition Poland
• 19 May 2020: CheckMates Live Virtual Edition New York and New England
• 21 May 2020: CheckMates Live Virtual Edition Georgia
• 28 May 2020: CheckMates Live Virtual Edition California and Southwest

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Community Highlights

Here's the threads to watch from the last week:

Ask Me Anything with Gil Shwed

We would like to invite you to join Gil Shwed, Check Point Founder & CEO, in his upcoming ‘Ask Me Anything’ session. Find out what he believes to be the best practices for security during the era of Coronavirus. Whether you have a question regarding cyber security or simply want to learn from what other security professionals are asking, join us on Zoom on May 4th 2020! Post your questions in the Zoom Q&A during the session and we’ll do our best to address them.

And, at the end of the Ask Me Anything, we’ll be drawing a raffle with all attendees. Prizes include a 3600 Quantum Appliance and a bespoke Check Point t-shirt signed by Gil himself.

Click here to register!

Updates to Check Point for Beginners (CP4B)

In addition to reorganizing the landing page for CP4B, we've added a new series of videos on Performance Optimization!

• Performance Optimization - Video 1 - Introduction
• Performance Optimization - Video 2 - CPSizeme Tool
• Performance Optimization - Video 3 - CoreXL
• Performance Optimization - Video 4 - SecureXL, Part 1
• Performance Optimization - Video 5 - SecureXL, Part 2

We also added a video on Deploying and Upgrading the Endpoint Security Client.

SmartConsole Extensions

@Danny seems to be on a roll taking his various one-liners and scripts and turning them into SmartConsole Extensions, usable on R80.30 and above! This week he's produced:

• Advanced System Summary from ccc script
• ClusterXL Statistics
• Super 7 Performance Assessment
• Remote Access VPN Statistics (updated)

Software Updates

• SmartConsole R80.40 GA Build 40
• R80.40 Jumbo Hotfix Ongoing Take 38
• SmartConsole R80.30 GA Build 76
• R80.30 Jumbo Hotfix Ongoing Take 195
• SandBlast Agent Management Platform now deploying on R80.30

How-To Videos

• Use Jenkins to Deploy AWS CloudFormation and run a Dome9 Assessment
• How to deploy Machine Cert Authentication for Remote Access

Other Community Discussions

• Anti-Spoofing on External Interface
• Best Practices for Threat Prevention API Calls to Appliance
• SSH Public Key Authentication With R80.30 and R80.40
• Real World local.scv Example
• Client Auth Replacement
• Remote Access to Server in Other Office Accessible over VPN
• migrate_server instead of migrate export
• Lab Deployment of VSX in VMware

Next TechTalk: Secure Data Transformation During COVID-19

The various mandates in response to COVID-19 have companies encouraging, if not mandating, that people work from home, which means only critical staff can be at the office or in the datacenter. This has led to an increase in the use of the public cloud services from AWS and Azure. Whether the business is one on the front line of combating Coronavirus, or is a financial institution, a manufacturer, a logistics company, or any other vertical, organizations must maintain business continuity during their cloud journeys and continue to provide the same level of security regardless of being in the cloud or on-premises. There has been case after case where a simple mis-configuration in a cloud subsystem has led to data loss.

Our next TechTalk will be done by @Gregory_Pepper on May 6th at 8am Pacific/5pm CEDT and will cover how CloudGuard Dome9 can keep your data secure by ensuring that your public cloud is compliant, secure from attacks, and is protected against mis-configurations. Register Now!

Upcoming Virtual User Group Events

Given the current and evolving situation with Coronavirus, we are planning virtual events for the time being.
While anyone is welcome to register for a CheckMates Live Virtual Edition events, they are generally for a limited number of people with priority given to people in the specified geographic area.
If you don't see your area listed, please contact us and we'll be happy to arrange a session for your area!

Bookmark the CheckMates Calendar to have an up-to-date list of events at your fingertips!
If you attend CheckMates Live events, you can get CPE credit! 

• 29 April 2020: CheckMates Live Virtual Edition Mid-South
• 30 April 2020: CheckMates Live Virtual Edition Russia
• 4 May 2020: Ask Me Anything with Gil Shwed
• 5 May 2020: CheckMates Live Virtual Edition DACH
• 6 May 2020: CheckMates Live Virtual Edition Mid-South
• 12 May 2020: CheckMates Live Virtual Edition Poland

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Free Check Point Training!

In addition to the materials we have on Check Point for Beginners, we offer the Check Point Jump Start course that is completely free! It is available on Udemy or Cybrary. We also just launched our Maestro Jump Start on Udemy! 

CheckMates GO S2E5: The Threats And Opportunities Of COVID-19

New episode of CheckMates GO available for listening pleasure!

Community Highlights

Here's the threads to watch from the last week:

Remote Access

Refer to the following FAQ in SecureKnowledge: sk166032 as well as our Short List of Most Useful Resources and Tools for Remote Access VPN .
Discussions of note:

• How to Configure VPN Remote Access on Non-Default Internet Link
• SmartConsole Extension: Remote Access VPN Statistics

If you have questions around Remote Access and Mobile Access Blade, best to ask in the Remote Access Solutions space!

SmartConsole Extensions

@Danny has been producing a number of SmartConsole Extensions lately, which are a great way to bring additional information into SmartConsole in R80.30 and above! In addition to the one on Remote Access VPN statistics linked above, he has produced the following in the last week:

• Show VPN Topology on Gateways 
• Advanced System Summary 
• Check Point Services Check

Other Community Discussions

• New Community Feature: Search Subscriptions
• Coronavirus Outbreak TechTalk
• Slow WinSCP Gateway Transfers in R80.40: Solution
• ONELINER: All Physical Interface States in One Overview
• Getting Started: VMware Workstation or ESXi?
• Dropbox and SSL Inspection
• How to Parse from Nested Arrays in API/JQ
• Disable Automatic Log Search
• R80+ Change Control: A Visual Guide (updated for R80.40)

Next TechTalk: Secure Data Transformation During COVID-19

The various mandates in response to COVID-19 have companies encouraging, if not mandating, that people work from home, which means only critical staff can be at the office or in the datacenter. This has led to an increase in the use of the public cloud services from AWS and Azure. Whether the business is one on the front line of combating Coronavirus, or is a financial institution, a manufacturer, a logistics company, or any other vertical, organizations must maintain business continuity during their cloud journeys and continue to provide the same level of security regardless of being in the cloud or on-premises. There has been case after case where a simple mis-configuration in a cloud subsystem has led to data loss.

Our next TechTalk will be done by @Gregory_Pepper on May 6th at 8am Pacific/5pm CEDT and will cover how CloudGuard Dome9 can keep your data secure by ensuring that your public cloud is compliant, secure from attacks, and is protected against mis-configurations. Register Now!

Upcoming Virtual User Group Events

Given the current and evolving situation with Coronavirus, we are planning virtual events for the time being.
While anyone is welcome to register for a CheckMates Live Virtual Edition events, they are generally for a limited number of people with priority given to people in the specified geographic area.
If you don't see your area listed, please contact us and we'll be happy to arrange a session for your area!

Bookmark the CheckMates Calendar to have an up-to-date list of events at your fingertips!
If you attend CheckMates Live events, you can get CPE credit! 

• 21 April 2020: CheckMates Live Virtual Edition UK and Ireland 
• 22 April 2020: CheckMates Live Virtual Edition Mid-South US
• 23 April 2020: CheckMates Live Virtual Edition Florida
• 24 April 2020: CheckMates Live Virtual Edition Greece
• 30 April 2020: CheckMates Live Virtual Edition Russia
• 5 May 2020: CheckMates Live Virtual Edition DACH
• 12 May 2020: CheckMates Live Virtual Edition Poland