Zero-Phishing for Quantum Network Security

[Peter_Elmer]

Phishing attacks are increasing and Check Point Research observed 19% of all Phishing attacks in April 2021 in EMEA using HTTPS.

In order to prevent these attacks, Check Point R&D is inviting customers experiencing the Zero-Phishing Early Availability program documented in sk172203. 

Check Point Certified Partners may want to contact their pre-sales representatives and then work with Check Point R&D supporting customers running a proof-of-concept.

Learn more about Check Point Zero-Phishing for Quantum Network Security watching the following videos:

• Overview and user experience (3min 40sec)
• Gateway settings and policy configuration (3min 57sec)

The instructions documented in sk172203 are referring to use a dedicated Root Certificate Authority for HTTPS inspection and to enroll a UserCheck Certificate against it. In my lab testing I used OpenSSL running on Gaia OS and share the commands I used here.

The following commands are based on documentation found at https://www.openssl.org/docs/ and have demonstrated to work in several lab tests on Gaia OS R81.

1) Define Gaia OS environment variables to ease configuration steps

PASS: A password protecting keying material. This password is requested when importing the .p12 containers in SmartConsole.
ROOTCAFQDN: The Fully Qualified Domain Name of the Root CA.
ROOTCACN: The Common Name (CN) of the Root CA. The CN will be used in the Subject field of the Root CAs' certificate.

export PASS=vpn123
export ROOTCAFQDN=zerophishRootCA.ngtpdemo.local
export ROOTCACN=zerophishRootCA.ngtpdemo.local

2) Generate a private/public keypair for the Root CA and protect them with $PASS

cpopenssl genrsa -passout pass:$PASS -out $ROOTCAFQDN.key 4096

3) Generate a self-signed Root CA Certificate using keying material created before

cpopenssl req -x509 -new -config $CPDIR/conf/openssl.cnf -nodes -key $ROOTCAFQDN.key -sha256 -days 1095 -out $ROOTCAFQDN.crt -batch -passin pass:$PASS -passout pass:$PASS -multivalue-rdn -subj "/CN=$ROOTCACN"

Enjoy Zero-Phishing EA Program!

-pelmer