Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
civoulkidis
Contributor

IPS Update and Policy installation

Hi,

I was wondering if I need to install the policy after the auto scheduled IPS update , in order to be effective in my Security Gateways(R80.40)?

0 Kudos
6 Replies
the_rock
Champion
Champion

No you do not, those are updated automatically if you set them that way and no need to install policy.

0 Kudos
Timothy_Hall
Champion
Champion

Assuming it is a new install of R80.40, or was a new install for at least R80.20 @the_rock is correct.  However if your SMS started life in R80.10 or earlier and was upgraded into R80.40, it may still be set for IPS updates to be manually performed by an administrator which will require a policy install to take effect.  Here is the coverage of this topic from my IPS/AV/ABOT Immersion course which shows the settings that you will need to check:

ips0.pngips1.pngips2.pngips3.png

 

New 2021 IPS/AV/ABOT Self-Guided Video Series
now available at http://www.maxpowerfirewalls.com
civoulkidis
Contributor

Can you please explain the below screenshots?

I get a warning in order to install the policy.

 

1.JPG

 

2.JPG

0 Kudos
the_rock
Champion
Champion

Its just cosmetic...run ips stat on gateway to see IPS version. Reboot always fixes that warning.

civoulkidis
Contributor

I installed the policy and the warning disappeared.

0 Kudos
civoulkidis
Contributor

As you can see in the picture below, I received a notification about a new vulnerability.

In the 2nd step of the official CheckPoint guide, I have to install the policy in all gateways in order to be protected,

 

ips.JPG

 

 

0 Kudos