R80.10 IPS Best Practices Guide

[Tomer_Sole]

Hi everyone, in the following document you will find:

- What are the major changes with IPS in R80.10 Security Management and Gateway.

- How can we set up an initial IPS configuration that gets regularly updated

- How can we tune our IPS to our organization's needs.

I would like to thank Omer Shliva for his efforts on this document. We will monitor this thread for questions.

PDF: http://downloads.checkpoint.com/dc/download.htm?ID=59099

HTML Frameset: https://sc1.checkpoint.com/documents/R80.10/IPS_Best_PracticeGuide/IPS_Best_PracticeGuide/html_frame...

[G_W_Albrecht]

Thank you a lot - this really is brand new 😉

[Martin_Raska]

Hello,

check also:

sk43733 How to measure CPU time consumed by IPS protections

sk110737 IPS Analyzer Tool - How to analyze IPS performance efficiently

BR

Martin

[Omer_Shliva]

Hi Martin,

Thank you for your comment. You can find this information on page 16 of our guide.

[Daniel_Westlund]

Is there a way in R80.10 to choose which resources IPS protects, ie, protect resources I define as internal?

[Martin_Raska]

You can do it via Threat Prevention policy with Protected scope field.

[Daniel_Westlund]

Thanks.  Looks like I need to wait until I get my gateway onto R80.10 as it failed to validate that attempt for R77.30.

[Martin_Raska]

Yes, because you can have only one profile per GW in R77.30

[D_W]

The Link is not working.

HTML Frameset: https://sc1.checkpoint.com/documents/R80.10/IPS_Best_PracticeGuide/IPS_Best_PracticeGuide/html_frame...

[Raj_Khatri]

When will the best practice guide for R80.20 be released?