CheckPoint Firewall R80.20 TechTalk.pptx

CheckPoint Firewall R80.20 TechTalk.pptx

1. Anat Eytan-Davidi Use Cases and More Security management R80.20  [Internal Use] for Check Point employees​

2. Management feature release How R80.20 can improve your day-2-day work R80.30 – join the EA program Q&A Agenda  [Internal Use] for Check Point employees​

3. Management feature release  [Internal Use] for Check Point employees​

4.  [Internal Use] for Check Point employees​ Management Feature Release

5.  [Internal Use] for Check Point employees​ Main Release Management Feature Release R80.10 R80.20 R80.30 R80.20.M1 R80.20.M2 JHF JHF (25-Jun-2018) (26-Sep-2018) (23-Dec-2018) Coming next (17-May-2017) R80.30.M1 TBD

6.  [Internal Use] for Check Point employees​ Which version should I install?

7. R80.20 new features  [Internal Use] for Check Point employees​

8.  [Internal Use] for Check Point employees​ IPS updates Until R80.20 Management fetched the IPS Updates Required policy installation Starting R80.20 Gateway can fetch the IPS updates independently Default option for users who used “scheduled IPS updates with automatic install policy” Keep gateway always up-to-date with the latest IPS signatures Management Gateway IPS updates Check Point Cloud

9.  [Internal Use] for Check Point employees​ Maintain Office365 list of IPs Until R80.20 Requires an on-going maintenance for the list of IPs Requires policy installation Starting R80.20 Add Office365 object in your policy Updatable object One-time policy installation Gateway fetches the list of IPs No need for an additional policy installation Your company is using Office 365 and you need to configure the policy accordingly

10. Countries

11. Countries

12. Multi-Tasking Until R80.20 Starting R80.20 Work on several changes in parallel Concurrent Administrators Concurrent Sessions

13.  [Internal Use] for Check Point employees​ Isolate tasks No need to publish or discard unfinished work Work on several tasks in parallel Have several open sessions at the same time Multi-Tasking

14.  [Internal Use] for Check Point employees​ Enable the feature Create a new session Multi-Tasking

15.  [Internal Use] for Check Point employees​ Also review all changes before publish

16. Install policy in a large environment Until R80.20 Install policy per policy package Need to be on-site or use an api Starting R80.20 Create policy installation presets, by gateways or policy packages Schedule policy installation Install policy on several gateways or several policy packages

17.  [Internal Use] for Check Point employees​ Schedule Install Policy

18.  [Internal Use] for Check Point employees​ Define IP address objects that share a common pattern that can be permitted or denied access in a security policy Wildcard Objects

19.  [Internal Use] for Check Point employees​ Wildcard Object 192.29. .1 192.29. 1 .1 192.29. 2 .1 192.29. 3 .1 192.29. 255 .1

20.  [Internal Use] for Check Point employees​ Export Check Point logs Log Exporter cp_log_export add name cp_exporter target-server 192.168.1.100 target-port 7781 protocol tcp format splunk read-mode semi-unified Check Point App for Splunk

21.  [Internal Use] for Check Point employees​ SmartEndpoint SmartProvisioining Global VPN Community Some more…

22. Important to know before upgrading to R80.20  [Internal Use] for Check Point employees​

23. New Linux Kernel version -> 3.10 New file system on the new kernel ext3 -> XFS Benefits More than 2TB support per a single storage device Enlarged systems storage (up to 48TB) I/O related performance improvements Compressed snapshots - reduced system snapshot size Kernel update for Management & log servers

24.  [Internal Use] for Check Point employees​ Kernel File System Clean install 3.10 XFS Advanced upgrade 3.10 XFS In-place upgrade 3.10 ext3 Upgrade Method to R80.20

25. Smartconsole extensions  [Internal Use] for Check Point employees​

26. Expand and customize Check Point SmartConsole for your needs Integrate tools you work with, into SmartConsole SmartConsole Extensions

27. Screenshot with the extension That’s it – the extension is ready and you can use it

28.  [Internal Use] for Check Point employees​ Where can I find it? And more information https:// community.checkpoint.com/docs/DOC-3472-how-to-extend-and-enhance-smartconsole

29. Places an extension can be added and many more… TOOLBAR DETAILS PANE GLOBAL PANE 1 2 3

30. R80.20.M2  [Internal Use] for Check Point employees​

31. R80.20.M2

32. CPView Now supports Multi-Domain Security Management SNMP support for CPView metrics

33. R80.30 – Join the EA program  [Internal Use] for Check Point employees​ R80.30

34. OVERVIEW CHANGES IN ACCESS CONTROL POLICY CHANGED OBJECTS Change Report