Create a Post

The CheckMates Blog - Page 22

cancel
Showing results for 
Search instead for 
Did you mean: 
The CheckMates Blog

Here's where we let you know what's going on with the CheckMates Community.

PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

CheckMates in Russia

While I took a week off the road to enjoy fall in the Pacific Northwest, Valeri Loukine‌ did a CPX in Russia followed by one of the largest CheckMates events we've had to date! 

And oh yeah, it was Val's birthday, too!

Image may contain: 1 person

Next week? Valeri and I will meet in Denmark for a couple of events.

Community Highlights

Meanwhile, here are the conversations worth watching in the community:

R80.20 - Portable SmartConsole + Tips and Tricks 

If you want to have multiple installations of the same "version" (but different build) of SmartConsole, Portable is the way to go.

Identity Collector Exclusion List 

What happens when you "include" versus "exclude" or leave those blank?

Strange Firewall logic for DHCP discover packets 

Handling of an IP of 0.0.0.0...

In VRRP cluster, IPSO-390 Voyager and 5600 Gaia R77.30 appliances together 

While you can't cluster these unlike appliances together, you can certainly use VRRP to minimize the downtime when switching over.

Python tool for exporting/importing a policy package or parts of it 

This has been updated for API 1.3 (R80.20 API).

How to switch to the new log viewer inside SmartConsole (and maybe get a little performance improvem... 

If you can't wait for SmartView to be the default log viewing experience, here's how to enable it now in R80.20.

R80.20 - new interesting commands 

I missed this in previous roundups of new posts related to R80.20.

VPN details using API 

It's not all there yet, but you can get some of the info.

Blocking Psiphon 3 R80.10 

Updated the thread with the latest guidance from R&D.

RulebaseExporter/RulebaseImporter 

Another tool to export/import your policy and objects from R80.x.

Blink - install Management Server with 1 step - is now available! 

If you want to do a quicker install of Security Management, here's how to do it!

How to Request an Evaluation License 

Updated instructions should work for everyone, including people who are not existing Check Point customers. 

Upcoming Events

Between Valeri Loukine and I, we'll be busy in the next several weeks!

Read more
24 0 10.7K
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

CheckMates in España and North Carolina

Valeri Loukine‌ brought CheckMates to our CPX in Madrid:

Meanwhile, I brought CheckMates to the Carolinas as part of a GenV roadshow:

Community Highlights

Meanwhile, here are the conversations worth watching in the community:

 

Support for R77.30 has been extended to September 2019 based on your feedback. 

Blocking the connection before final rule match: CPEarlyDrop 

Due to the column-based matching in R80.x gateways, it's possible to drop a connection before the rulebase is fully evaluated. This article explains this "early drop" mechanism.

R80.20 - new ClusterXL commands 

We've added some new commands to look at the state of ClusterXL in R80.20.

Using SNMP with SandBlast Network 

You can monitor the SandBlast Appliance with SNMP--here's how.

Do GEO location objects trump the IPS Geo policy? 

GeoProtection still works the same in R80.20 as it did in previous releases, but you now have the option to put countries in the regular Access Policy. For earlier releases, see: GEO Location Objects in Firewall Policy (with Dynamic Objects)

Difference between Session and Connection?? 

I cover this in my "Migrate to R80.20" talk I do in local user groups.

80.10 Management Server - 80.20 gateways? 

This will be supported soon...

https://community.checkpoint.com/thread/9908-the-r8020-nomouse-challenge 

Did you know you could use SmartConsole without a mouse?

Upcoming Events

Between Valeri Loukine and I, we'll be busy in the next several weeks!

Read more
24 0 4,554
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

CheckMates Champions in Israel

We brought CheckMates Members and Contributors of the Year winners to our headquarters in Tel Aviv to collaborate, meet with Check Point R&D, and of course show them the beautiful county of Israel! 

It was a pleasure to host you Heiko Ankenbrand‌, Timothy Hall‌, Vladimir Yakovlev‌, and Danny Jung‌!

And yes, this included a meeting with Gil and Dorit, who autographed a couple of items for Danny and Heiko!

Heiko Ankenbrand‌ even made a little video about the experience: Thanks for Checkmates Winners Event  

Video Link : 10647

Community Highlights

Meanwhile, conversations continued, despite an issue that prevented some of you from logging in during the week.

Here are the highlights:

Properly defining the Internet within a security policy 

This is definitely much easier in R80.10+ gateways where you can use the "Internet" object.

SmartConsole AD authentication  

Not natively supported, but it is possible to get working via RADIUS.

https://community.checkpoint.com/community/secure-knowledge/blog/2018/10/01/article-of-the-week-chec... 

Did you know we've had this tool for more than a year now?

R80.10 VRRP cluster: To hide or not to hide members ip? 

That...is the question.

Threat Prevention Meta Data 

Defines how severity, performance and confidence levels are assigned to new protections across various threat prevention blades.

R80.x Security Gateway Architecture (Acceleration Card Offloading) 

One of the sessions we had this week in Tel Aviv was the new acceleration architecture in R80.20, primarily in place to support the upcoming Falcon Accelerator cards (among other things).

Check Point For Beginners Lectures Series. Part 1 - The Architecture 

Basics on the Infinity Architecture.

https://community.checkpoint.com/community/cloudguard-iaas/blog/2018/10/13/replacing-a-member-in-an-... 

Works a bit different i public clouds, but it can be done.

R80.20 SecureXL + new chain modules + fw monitor 

You'll see a few new things when you start looking around in fw monitor and SecureXL.

https://community.checkpoint.com/docs/DOC-3178-using-postman-api-development-tool-to-consume-sandbla... 

Postman is a great tool for learning how to use the API, and now you can use it with the SandBlast API!

Upcoming Events

Between Valeri Loukine and I, we'll be busy in the next several weeks!

Read more
32 1 1,143
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

 

CheckMates in Paris

Valeri Loukine‌ did an event in our Paris office this week.

Here's a brief video he recorded prior to the start of the event.

(view in My Videos)

Community Highlights

Meanwhile we've had a lot of discussions  the past week.

Here's some of the highlights:

 

R80.20 Discussions

Highlighting the threads where R80.20 topics are being discussed.

 

Check Point for Beginners

For those who haven't been around quite as long as Valeri Loukine‌ and I have, we have a brief history lesson: Brief History of Check Point Firewalls . There are also several videos on the subject as well:

More content will be posted here in the coming days/weeks!

 

IPS Analyzer Tool - How to analyze IPS performance efficiently 

Lets you see the performance impact of various IPS protections.

 

High Performance Gateways and Tuning 

Nice followup discussion to TechTalk: Security Gateway Performance Optimization with Tim Hall‌. See also: Show me yours 

 

Searching zero hits rules in R80.10 

You have to use the API to do it.

 

R77.30 to R80.10 upgrade/migration to new Smart-1?  

Migrate export/import is your friend.

 

ckpSSL ssl lib error 

This can happen when you're attempting to manage unsupported versions of Security Gateway.

 

Enhanced Threat Prevention System Query: Set a Column Profile to Match Your Log Query 

How to more easily see when Threat Prevention signatures get updated.

 

Upcoming Events

Between Valeri Loukine and I, we'll be busy in the next several weeks!

Read more
13 0 813
Yevgeniy_Yeryom
Contributor

Hello mates, 

is there a way to insert pictures by drag and drop?

I am using Chrome.  

I mean, that is a very very useful and time saving feature. 

And one picture often says more that thousands words. Smiley Happy 

Read more
0 6 23K
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Community Highlights

Here are the top threads of the past week or so:

Check Point R80.20 is now GA

A few threads related to R80.20, which was released in the last week.

TechTalk: Security Gateway Performance Optimization with Tim Hall 

The "Super Seven" commands in all their glory. Discussion about and many questions answered!

Remote Access VPN in a Load-sharing Cluster Environment 

Here's a thread on getting it all working together.

Automatic Configuration of Appliance on boot 

There's a couple ways to do it, depending on if it's a physical appliance or a virtual one.

SMS lost connection to all 

SIC got out of sync and needed to be reset.

Security Gateway Inventory  

Script has been updated to capture MAC addresses of Security Gateways as well.

Install database process 

There is Install Policy and there is Install Database.

Mobile Access client options - general questions 

There are several options for Remote Access.

Maintenance actions that should be performed by admins 

Are you doing these things on your Security Gateways?

Upcoming Events

Between Valeri Loukine and I, we'll be busy in the next several weeks!

Read more
5 0 735
_Val_
Admin
Admin

Understanding technology is a challenge. 

Complex concepts, rapid changes, new paradigms, overwhelming details, tools to master, time pressure - all those things might be tough to cope with.

As a member of CheckMates, you deserve the best. That's why we have created a new Space on CheckMates - Check Point for Beginners. It is members' exclusive space where we will be posting learning materials: videos, articles, lab manuals,  even history overviews - to help you out and to make understanding and mastering Check Point easier, less stressful and more productive. 

To do so, go here: Check Point for Beginners 2.0 

 

Note: You have to be a member of CheckMates to get full access to the materials. Please register with your UserCenter account. Create one, if you do not have it yet.

Read more
37 13 51.7K
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Let us know if you want to have it in your native language as well.

CheckMates Comes to Texas

One of the events I did this week was in our newly expanded office space in our Dallas TAC, which is still under construction:

 

I also had to say hi to Jason Tugwell‌ and Toni Ponder‌ in our Training and Certification team:

And, of course, it's new iPhone time.

Had to check out CheckMates on the Xs Max!

Looks great, as expected!

Community Highlights

Here are the top threads of the past week or so:

 

This unofficial poll has generated a lot of discussion. Even Product Management has chimed in!

Troubleshooting policy installation 

Some pointed questions (and answers) about how to do this.

multidomain and mgmt_cli 

If you're using Multi-Domain Management and using the CLI, make sure you're either logged into the domain or the domain is specified as part of the CLI command.

Create objects for Azure Data-Center IP ranges - Python script 

And the companion for R77.30 and earlier: Create/Update Azure Network/Group Objects for Public IP Space (77.30-below) 

Max Power (max) - Fix me beautiful 

This Bash script analyzes your Check Point system and provides advanced security, health and performance optimization tips.

Speed up your Snapshot creation and revert time 

Links to a couple SKs on the topic.

Cipher Configuration Tool (CCT) 

Simpler way to control what ciphers are permitted by various parts of the product.

Maintenance actions that should be performed by admins 

See also: Maintenance actions that should be performed by admins 

iOS12 Siri Shortcuts and MGMT API 

Speak to your phone and get the status of your firewalls. Smiley Happy

 

Upcoming Events

Between Valeri Loukine and I, we'll be busy in the next several weeks!

Read more
10 0 758
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Let us know if you want to have it in your native language as well.

 

New CheckMates Swag

Yes, I ordered some new stickers:

I also have some other stuff on order, some of which I will be giving away at CheckMates events in the near future.

What, exactly? You'll have to wait and see.

Community Highlights

Here are the top threads of the past week or so:

https://community.checkpoint.com/people/moti50852693-eafc-4efe-88b1-ae2368b6613e/blog/2018/09/12/cal...

After a very successful CheckMates track during 2018, we're putting out a Call For Papers for our upcoming global CPX 360 events for 2019!

Security Gateway Inventory  

A useful script when you've got a lot of gateways in a Multi-Domain Environment.

SmartConsole R80.10 (GA Build 073) now available 

SmartConsole R80.10 has gotten an update with some bugfixes.

R77.30 - Support until May 2019 

If you haven't upgraded to R80.x, there's no time like the present. Also some hints about R80.20 GA in this thread from a reliable source Smiley Happy

Making Skype work properly with HTTPS inspection enabled featuring To Probe Bypass or Not To Probe B... 

This issue has come up a few times on CheckMates, and John Fenoughty seems to have come up with a way to make it play nice.

AW keeps deleting Dameware Service 

Exclusions have to be configured properly.

https://community.checkpoint.com/community/training-and-certification/blog/2018/07/20/emerging-techn... 

Be sure to take advantage of this complimentary training for CheckMates members, if you haven't already!

Upcoming Events

Between Valeri Loukine‌ and I, we'll be busy in the next several weeks!

Read more
7 0 614
Moti
Admin
Admin

Share your Cyber Security insights on-stage at CPX 360 !

 

We’re looking for speakers who will teach, share and inspire Check Point customers and partners to use the innovations, strategies, tools, and techniques needed to prevent cyber threats! How are you leveraging the power of Check Point Infinity Architecture to protect your organization? What are some of the technical tips and tricks you can recommend? Submit your ideas to CPX 360 !

 

This year we have two dedicated call for papers tracks:

*20x20 Cyber Innovation Competition 

*CheckMates Community use cases 

 

Recommended topic areas include real use cases in:

  • Cutting edge cyber security innovations 
  • Cloud Security
  • Perimeter and Data Center Security
  • Mobile security
  • Advanced Threat Prevention
  • R80.X use cases
  • Security Automation

 

Remember to include practical advice, key success factors, proven examples, an in-depth explanation of the challenges you’ve overcome and lessons learned on topics related to securing your datacenter, your cloud environments, your mobile and endpoints.

 

Key Dates

  • Submissions deadline is November 30th 
  • Decision and notification to speaker December 15th

 

Submit your abstract to [email protected]

 

Items to Include in Submission

All submissions must include the following information:

  • Presenter’s name
  • Presenter’s organization, job title and biography
  • Presentation title
  • Track you are submitting for (20x20 Innovation Competition or CheckMates)
  • Short abstract – maximum 100 words
  • Length – ideally 20-30 minutes for the CheckMates track, 6 minutes 40 seconds for the 20x20 Innovation Competition track)
  • If applicable, please also include any links to previous presentations, slide decks, or papers
  • Please include an estimate of how ‘technical’ your presentation will be. The following rating will be used:

T1  = Very little technical knowledge required

T2  = Some technical knowledge is assumed
T3 = Largely technical and/or detailed content aimed at technicians

  • Event you are submitting to (Bangkok (Jan. 21th-23th), Las Vegas (Feb. 4th-6th), Vienna (Feb. 18th-20th))
  • Presenters are to submit for an event in their respective GEO's   
  • Presentations must be written in English
  • Presentations should present original work, which ideally has not been previously published
  • Presentations will be selected based on their originality, significance, correctness and clarity of presentation

 

Key Disclaimers

It is important for presentations to avoid vendor/partner/sponsor specific  ‘product pitches/sales pitches’. If presentation proposals are considered to contain such material (product pitches/sales) they will more than likely be rejected early in the review process. Further, vendors are reminded that there is no linkage between conference sponsorship and the opportunity to present at the conference.

proposals with real use cases from customers will be given priority in the selection criteria 

 

We will give full conference passes (with hotel) only to those who actively participate as speakers on accepted presentations.

Read more
7 1 3,281