IPS Update and Policy installation

[civoulkidis]

Hi,

I was wondering if I need to install the policy after the auto scheduled IPS update , in order to be effective in my Security Gateways(R80.40)?

[the_rock]

No you do not, those are updated automatically if you set them that way and no need to install policy.

[Timothy_Hall]

Assuming it is a new install of R80.40, or was a new install for at least R80.20 @the_rock is correct.  However if your SMS started life in R80.10 or earlier and was upgraded into R80.40, it may still be set for IPS updates to be manually performed by an administrator which will require a policy install to take effect.  Here is the coverage of this topic from my IPS/AV/ABOT Immersion course which shows the settings that you will need to check:

[civoulkidis]

Can you please explain the below screenshots?

I get a warning in order to install the policy.

[the_rock]

Its just cosmetic...run ips stat on gateway to see IPS version. Reboot always fixes that warning.

[civoulkidis]

I installed the policy and the warning disappeared.

[civoulkidis]

As you can see in the picture below, I received a notification about a new vulnerability.

In the 2nd step of the official CheckPoint guide, I have to install the policy in all gateways in order to be protected,