fireverse.org

Avatar is Public EA…

Pat — Wed, 18 Aug 2010 17:21:41 +0000

“Avatar” is the new version of VE, and is specifically designed for a VMWare environment. It was just announced early this morning that it is now available for Public EA. I will have more info late r in the day including the Release Notes for download…

Update: Alright I got a little side tracked with an unexpected appendectomy on Wednesday, but I am back. Below are the release notes for Avatar:

CP_SecurityGateway_VE_ReleaseNotes

TFTPD32

Pat — Mon, 19 Jul 2010 23:50:59 +0000

Was working on an HP DL380 in my lab, and needed a quick way to setup a DHCP server so that I could get an IP on the iLo module. That’s when I found this cool Open Source utility:

TFTPD32

This little app has a TFTP Server, TFT Client, DHCP Server, and Syslog Server. So if you are stuck in a lab (like I was) with only your Win32 laptop, this is a great tool. I have only tested the DHCP Server so far, but one of the things I immediately liked about it was that you could choose what interface you wanted the DHCP server to listen on.

It also has a “Log viewer” tab, so you can see whether the requests are getting to your daemon, and whether an address was handed out (see below).

In my case I just needed to supply one DHCP address from my laptop. It was very straightforward to setup and configure.

New VPN Client ‘Discovery’ is Public GA

Pat — Thu, 27 May 2010 08:28:54 +0000

Check Point just announced public EA availability for ‘Discovery.’ This is the replacement for SecureClient. ‘Discovery’ supports XP, Vista, and Windows 7 including the 32 bit and 64 bit versions. I think that the 64 bit support is going to be one of the key features on this as most new PCs are shipping with Windows 7 64 bit. Some other features:

Broad Operating System support (Windows XP, Vista, Windows 7 64-bit)
Uninterrupted connectivity with VPN Auto-Connect, keeping users connected on intermittent networks, when roaming between LAN and wireless or when resuming work from sleep mode
Transparent end user experience with automatic configuration of the VPN session when on the move and on new or remote networks
Location Awareness – maintains VPN connectivity based on the user’s location, either in the corporate network or on the Internet.
Enhanced support for Hotspot detection and registration
Automatic and transparent upgrade without requiring administrative privileges or reboot

The “Migration Guide” provided here will give you some more good info (as well as what is not supported in this version).

R71 Firewall Rule Expiration Demonstration

Pat — Tue, 04 May 2010 23:38:25 +0000

Go ‘fullscreen’ for better resolution.

R71 is GA

Pat — Fri, 30 Apr 2010 00:49:27 +0000

Released just in time for CPX in Las Vegas, R71 was posted today. Major highlights:

New DLP Blade
Integrated IPS-1 Management
Firewall Rule Expiration <—–Wow
Performance Enhancements
Provider-1 Enhancements
Eventia renamed to SmartEvent
and more….

Looks like you can upgrade from R65 and forward. Includes all the HFAs in R65 HFA60 and R70.20

VSX NGX R65 HFA02 Now Public EA

Pat — Mon, 26 Apr 2010 02:41:45 +0000

The new HFA02 for VSX is now available for public EA. This is a good sign, and I would expect to see it go public GA in the next few weeks. See my previous post for a link to the release notes.

VSX NGX R65 HFA02 in EA

Pat — Tue, 13 Apr 2010 14:46:00 +0000

It was just announced internally at Check Point that HFA02 for VSX R65 is being released. As far as “what is new”, it looks to be a list of a dozen or so issues that have been addressed.

Word is that this will be made GA in the next few weeks. I have the release notes posted below if you want to take a look.

VSX NGX R65 HFA02 Release Notes

R70.30 Released

Pat — Tue, 23 Mar 2010 18:19:58 +0000

Saw today in the ‘downloads’ section that R70.30 has been released. Not a whole of fixes that have been documented at this point. It is possible that more ‘fixes’ are included than are actually documented in the release notes. I have the Release Notes and Installation Guide posted below:

R70.30 Release Notes

R70.30 Installation Guide

R70 Submitted for Common Criteria Certification

Pat — Tue, 12 Jan 2010 06:51:30 +0000

I had mentioned in a previous post that R70 had been submitted for Common Criteria Certification. Looks like the NIAP page was updated recently as it now reflects R70 and several other products. R70 “Software Blades” will be certified on Open Servers, and on the Power-1 and UTM platforms (see VID 10387 and 10388). Again, this is great news for security professionals working on Check Point products, and once again re-enforces Check Point’s commitment and long history of CC Certification (R55 and on).

VSX and Provider-1 in Common Criteria Evaluation

Pat — Sat, 02 Jan 2010 09:41:18 +0000

Saw this over on the NIAP page last week. Scroll down to the Check Point listings, and you will see a new entry: Looks like VSX R65 and Provider-1 R70 were submitted for evaluation on Dec 21st 2009. This is great news for anyone running or considering these products. Both have a very strong history of securing large environments, and it is good to see these products in evaluation. Looks like they will gain their ELA4 certification in 2011. In the meantime though it is good to be able to show auditors that the product you are running is going through the official process.

No word yet on what the TOE exactly is, but I will post more info as I find it. It is also interesting to note that the first R70 product submitted is Provider-1, although the rest of the R70 line has supposedly been submitted. Apparently the NIAP “In Evaluation” page has not been updated to reflect the rest of the line.