Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Dariusz_Puzynow
Explorer
Jump to solution

sandbox TE1000X

Have this kind appliance some of Kaspersky antivirus engine ? If Yes, can we uninstall this part ?

1 Solution

Accepted Solutions
Thomas_Werner
Employee Alumnus
Employee Alumnus

Hi Olga,

Sorry for the delayed answer.

The procedure mentioned for Kaspersky removal in sk118539 will also remove Kaspersky from the Threat Emulation (Sandbox) part. Please remember that after Kaspersky removal AV malware detection on our gateways will still work at the same security level/detection rate but without involving Kaspersky components anymore. So there is no security impact !


So to summarize:

  1. For existing R80.10/R77.30 installations there is a CPUSE package to remove Kaspersky (Check Point <VERSION> Hotfix for sk118539 (Kaspersky Anti-Virus Removal) )
  2. For new R80.10 installations there is a dedicated ISO without Kaspersky components (R80.10 image Take 462 or higher)
  3. For Endpoint Anti-Malware you can disable the AV blade (How to disable and remove Kaspersky Labs components from Check Point Endpoint Anti-Malware Blade ) but we plan to have an endpoint AV blade not related to Kaspersky in the near future

Regards Thomas

View solution in original post

4 Replies
Thomas_Werner
Employee Alumnus
Employee Alumnus

Hi Dariusz,

Check How to disable and remove Kaspersky Labs components from Check Point Security Gateway 

There are also TE specific notes.

Regards Thomas 

0 Kudos
Olga_Kuts
Advisor

Hi Thomas,

This question also interests me. The sk has only notes for endpoint clients with an Ant-Malware blade, but there is nothing about the sandblast appliance. Do we need to install a fix if we use sandblast agents and a local sandblast appliance TE1000X?

0 Kudos
Maria_Pologova1
Explorer

Hi Olga,

Looks like in your message you're referring to another sk - How to disable and remove Kaspersky Labs components from Check Point Endpoint Anti-Malware Blade.

I believe, the second section in the sk118539 is exactly what you are looking for - Action plan for versions R77.30 and above (Disable & Remove).

You need to install Check Point <VERSION> Hotfix for sk118539 (Kaspersky Anti-Virus Removal) as in picture below.

0 Kudos
Thomas_Werner
Employee Alumnus
Employee Alumnus

Hi Olga,

Sorry for the delayed answer.

The procedure mentioned for Kaspersky removal in sk118539 will also remove Kaspersky from the Threat Emulation (Sandbox) part. Please remember that after Kaspersky removal AV malware detection on our gateways will still work at the same security level/detection rate but without involving Kaspersky components anymore. So there is no security impact !


So to summarize:

  1. For existing R80.10/R77.30 installations there is a CPUSE package to remove Kaspersky (Check Point <VERSION> Hotfix for sk118539 (Kaspersky Anti-Virus Removal) )
  2. For new R80.10 installations there is a dedicated ISO without Kaspersky components (R80.10 image Take 462 or higher)
  3. For Endpoint Anti-Malware you can disable the AV blade (How to disable and remove Kaspersky Labs components from Check Point Endpoint Anti-Malware Blade ) but we plan to have an endpoint AV blade not related to Kaspersky in the near future

Regards Thomas

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events