SECURITY MANAGEMENT R 80 20 Use Cases and

SECURITY MANAGEMENT R 80. 20 Use Cases and More Anat Eytan-Davidi © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 1

Agenda • Management feature release • How R 80. 20 can improve your day-2 -day work • R 80. 30 – join the EA program • Q&A © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 2

MANAGEMENT FEATURE RELEASE © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees

Management Feature Release © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 4

(17 -May-2017) Main Release R 80. 10 Management Feature Release JHF (26 -Sep-2018) R 80. 20. M 1 (25 -Jun-2018) © 2019 Check Point Software Technologies Ltd. JHF R 80. 20. M 2 (23 -Dec-2018) R 80. 30 Coming next R 80. 30. M 1 TBD [Internal Use] for Check Point employees 5

Which version should I install? © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 6

R 80. 20 NEW FEATURES © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees

IPS updates Keep gateway always up-to-date with the latest IPS signatures Until R 80. 20 Starting R 80. 20 • Management fetched the IPS Updates • Gateway can fetch the IPS updates • Required policy installation Check Point Cloud independently • Default option for users who used “scheduled IPS updates with automatic install policy” IPS updates Gateway Management © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 8

Maintain Office 365 list of IPs Your company is using Office 365 and you need to configure the policy accordingly Until R 80. 20 Starting R 80. 20 • Requires an on-going maintenance for • Add Office 365 object in your policy the list of IPs • Requires policy installation – Updatable object • One-time policy installation • Gateway fetches the list of IPs – No need for an additional policy installation © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 9

Countries © 2019 Check Point Software Technologies Ltd. 10

Countries © 2019 Check Point Software Technologies Ltd. 11

Multi-Tasking Work on several changes in parallel Until R 80. 20 Concurrent Administrators © 2019 Check Point Software Technologies Ltd. Starting R 80. 20 Concurrent Sessions 12

Multi-Tasking ü Isolate tasks ü No need to publish or discard unfinished work ü Work on several tasks in parallel ü Have several open sessions at the same time © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 13

Multi-Tasking 1. Enable the feature 2. Create a new session © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 14

Also review all changes before publish © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 15

Install policy in a large environment Install policy on several gateways or several policy packages Until R 80. 20 Starting R 80. 20 • Install policy per policy package • Create policy installation presets, by • Need to be on-site or use an api © 2019 Check Point Software Technologies Ltd. gateways or policy packages • Schedule policy installation 16

Schedule Install Policy © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 17

Wildcard Object 192. 29. 0. 1 © 2019 Check Point Software Technologies Ltd. 192. 29. 1. 1 192. 29. 2. 1 192. 29. 3. 1 [Internal Use] for Check Point employees 192. 29. 255. 1 19

Log Exporter Export Check Point logs cp_log_export add name cp_exporter target-server 192. 168. 1. 100 target-port 7781 protocol tcp format splunk read-mode semi-unified Check Point App for Splunk © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 20

Some more… • Smart. Endpoint • Smart. Provisioining • Global VPN Community © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 21

IMPORTANT TO KNOW BEFORE UPGRADING TO R 80. 20 © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees

Kernel update for Management & log servers • New Linux Kernel version -> 3. 10 • New file system on the new kernel ext 3 -> XFS • Benefits More than 2 TB support per a single storage device Enlarged systems storage (up to 48 TB) I/O related performance improvements Compressed snapshots - reduced system snapshot size © 2019 Check Point Software Technologies Ltd. 23

Upgrade Method to R 80. 20 Clean install Advanced upgrade In-place upgrade © 2019 Check Point Software Technologies Ltd. Kernel 3. 10 File System XFS ext 3 [Internal Use] for Check Point employees 24

SMARTCONSOLE EXTENSIONS © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees

Smart. Console Extensions • • © 2019 Check Point Software Technologies Ltd. Expand customize Check Point Smart. Console for your needs Integrate tools you work with, into Smart. Console 26

© 2019 Check Point Software Technologies Ltd. 27

That’s it – the extension is ready and you can use it • Screenshot with the extension © 2019 Check Point Software Technologies Ltd. 28

Where can I find it? And more information https: //community. checkpoint. com/docs/DOC-3472 -how-to-extend-and-enhance-smartconsole © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 29

Places an extension can be added and many more… 1 TOOLBAR 3 GLOBAL PANE 2 DETAILS PANE © 2019 Check Point Software Technologies Ltd. 30

R 80. 30 – JOIN THE EA PROGRAM © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees

Change Report OVERVIEW CHANGES IN ACCESS CONTROL POLICY CHANGED OBJECTS © 2019 Check Point Software Technologies Ltd. 35

Summary 30 © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 36

Q&A © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 37

THANK YOU © 2019 Check Point Software Technologies Ltd. [Internal Use] for Check Point employees 38