R80.20 on TE100X - Recommended?

[dj0Nz]

Hi,

I have been asked to upgrade a TE100X system from R77.30 to R80.20.

Our customer heard "rumors" that it will run a lot better with R80.20.

I am careful with such things.

Does anybody have a TE100X running with R80.20? Is it recommended by Checkpoint itself?

Thanks.

Michael

[William_Douglas]

Hi,

To my knowledge the GAiA version for TE Appliances is still at R77.30.  You can integrate it with R80.20, but to my knowledge there is no R80.20 for TEX.

[Martin_Raska]

You can use R80.20 and according to what I've heard it should perform much better regarding MTA

Starting from November 2018, has been added support for Check Point R80.10 and R80.20 - sk106210

[Chinmaya_Naik]

#Chinmaya Naik

[William_Douglas]

Thank you for the information.

[dj0Nz]

Thank you very much.

But the question was not if it is supported, but if it can be recommended.

I also heard that MTA should perform much better and that's why we're considering an update.

But I don't know anyone who can confirm this, because he has already seen it in productive operation.

[Chinmaya_Naik]

We are using the R80.20 ISO for TE for POC purpose and we also enable the MTA  and its working fine. But still, some use cases are pending from our end.

Link: Block Malicious Unknown File type attachment (MTA) (TE) (R80.20) 

 We still not using R80.20 on production. but in R80.10 is running on production for some customer and its working fine.

Please find the below enhancement for MTA in R80.20 ISO

• MTA (Mail Transfer Agent)
  • MTA monitoring, e-mails history views and statistics, current e-mails queue status and actions performed on e-mails in queue.
• MTA configuration enhancements
  • Setting a domain object as next hop.
  • Ability to create an access rule to allow SMTP traffic to a Security Gateway.
  • Create a dedicated Advanced Threat Prevention rule for MTA.
• MTA enforcement enhancements
  • Replacing malicious links in an email with a configurable template.
  • Configurable format for textual attachments replacement.
  • Ability to add a customized text to malicious e-mails' body or subject.
  • Tagging malicious-mails using X-header
  • Sending a copy of the malicious e-mail to a predefined recipients list

Thanks

#Chinmaya Naik

[dj0Nz]

Again, thank you very much, this helps a lot!

So to sum it up: No one is using R80.20 on a TE100X Appliance in production.

Maybe I'll give it a try. Have to ask the customer...

[Chinmaya_Naik]

Hii

We also put soon on production (R80.20) once we completed some usecases.

Please update in case any issue you face.

#Chinmaya Naik

[dj0Nz]

I asked our Sandblast Man at Checkpoint and was been told that there are a lot of MTA improvements in R80.xx. See Mail Transfer Agent Update - What's New 

[dj0Nz]

Customer running on R80.20. No issues so far...