1 / 34

Anat Eytan-Davidi

Use Cases and More. Security management R80.20. Anat Eytan-Davidi. Agenda. Management feature release How R80.20 can improve your day-2-day work R80.30 – join the EA program Q&A. Management feature release. Management Feature Release. (17-May-2017). R80.10. JHF. Main Release.

trandolph
Download Presentation

Anat Eytan-Davidi

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Use Cases and More Security management R80.20 Anat Eytan-Davidi  [Internal Use] for Check Point employees​

  2. Agenda • Management feature release • How R80.20 can improve your day-2-day work • R80.30 – join the EA program • Q&A  [Internal Use] for Check Point employees​

  3. Management feature release  [Internal Use] for Check Point employees​

  4. Management Feature Release  [Internal Use] for Check Point employees​

  5. (17-May-2017) R80.10 JHF Main Release (26-Sep-2018) R80.20 JHF R80.30 Coming next Management Feature Release R80.20.M2 R80.20.M1 R80.30.M1 TBD (23-Dec-2018) (25-Jun-2018)  [Internal Use] for Check Point employees​

  6. Which version should I install?  [Internal Use] for Check Point employees​

  7. R80.20 new features  [Internal Use] for Check Point employees​

  8. IPS updates Keep gateway always up-to-date with the latest IPS signatures Until R80.20 • Management fetched the IPS Updates • Required policy installation Starting R80.20 • Gateway can fetch the IPS updates independently • Default option for users who used “scheduled IPS updates with automatic install policy” Check Point Cloud IPS updates Management Gateway  [Internal Use] for Check Point employees​

  9. Maintain Office365 list of IPs Your company is using Office 365 and you need to configure the policy accordingly Until R80.20 • Requires an on-going maintenance for the list of IPs • Requires policy installation Starting R80.20 • Add Office365 object in your policy • Updatable object • One-time policy installation • Gateway fetches the list of IPs • No need for an additional policy installation  [Internal Use] for Check Point employees​

  10. Countries

  11. Countries

  12. Multi-Tasking Work on several changes in parallel Until R80.20 Starting R80.20 Concurrent Administrators Concurrent Sessions

  13. Multi-Tasking • Isolate tasks • No need to publish or discard unfinished work • Work on several tasks in parallel • Have several open sessions at the same time  [Internal Use] for Check Point employees​

  14. Multi-Tasking Enable the feature Create a new session  [Internal Use] for Check Point employees​

  15. Also review all changes before publish  [Internal Use] for Check Point employees​

  16. Install policy in a large environment Install policy on several gateways or several policy packages Until R80.20 • Install policy per policy package • Need to be on-site or use an api Starting R80.20 • Create policy installation presets, by gateways or policy packages • Schedule policy installation

  17. Schedule Install Policy  [Internal Use] for Check Point employees​

  18. Wildcard Object 192.29.255.1 192.29.0.1 192.29.1.1 192.29.2.1 192.29.3.1  [Internal Use] for Check Point employees​

  19. Log Exporter cp_log_export add name cp_exporter target-server 192.168.1.100 target-port 7781 protocol tcp format splunkread-mode semi-unified Check Point App for Splunk Export Check Point logs  [Internal Use] for Check Point employees​

  20. Some more… SmartEndpoint SmartProvisioining Global VPN Community  [Internal Use] for Check Point employees​

  21. Important to know before upgrading to R80.20  [Internal Use] for Check Point employees​

  22. Kernel update for Management & log servers • New Linux Kernel version -> 3.10 • New file system on the new kernel • ext3 -> XFS • Benefits • More than 2TB support per a single storage device • Enlarged systems storage (up to 48TB) • I/O related performance improvements • Compressed snapshots - reduced system snapshot size

  23. Upgrade Method to R80.20  [Internal Use] for Check Point employees​

  24. Smartconsole extensions  [Internal Use] for Check Point employees​

  25. SmartConsole Extensions • Expand and customize Check Point SmartConsole for your needs • Integrate tools you work with, into SmartConsole

  26. That’s it – the extension is ready and you can use it Screenshot with the extension

  27. Where can I find it? And more information https://community.checkpoint.com/docs/DOC-3472-how-to-extend-and-enhance-smartconsole  [Internal Use] for Check Point employees​

  28. Places an extension can be added and many more… TOOLBAR GLOBAL PANE DETAILS PANE 1 2 3

  29. R80.30 R80.30 – Join the EA program  [Internal Use] for Check Point employees​

  30. Change Report OVERVIEW CHANGES IN ACCESS CONTROL POLICY CHANGED OBJECTS

  31. Summary 30  [Internal Use] for Check Point employees​

  32. Q&A  [Internal Use] for Check Point employees​

  33. THANK YOU  [Internal Use] for Check Point employees​

More Related