Author: Pat

Am renewing my CCSA and CCSE for the umptienth time since 1999. I had a CCSA class in the end of July that was abysmal. The training company was so bad that I need to do a writeup so that

The Check Point “OpenSSL Padding Oracle…” IPS signature is blocking ALL SSL traffic in some environments: I have seen the signature first-hand in production on R80.20 gateways and it shuts down all SSL traffic including the SSL VPN portal (Mobility

Seeing this in multiple customer environments. Making everything turn red in SmartConsole. Another symptom that seems related is not being able to hit the following link from a gateway or management server: curl_cli -v –cacert $CPDIR/conf/ca-bundle.crt https://usercenter.checkpoint.com/usercenter/services/BladesManagerService Hopefully this gets

CheckPoint’s site was down today: and returning this error: WordPress is a somewhat complex CMS to secure. As a CMS it is estimated to have 60%+ of the market-share, and uses PHP and MySQL/MariaDB. There are tons of plug-ins, including

If you were at CPX New Orleans, then you saw the announcement. R80.40 Portal. R80.40 release notes. R80.40-specific Documentation. Dorit touched briefly on some of the new enhancements at CPX.

Did some sub work for a “three star” partner that does not have any Check Point certified engineers on staff (ahem). Anyways, nothing like making 40+ changes in SmartConsole and seeing this: After a few more crashes I then got

R80.40 EA went live a few days ago. There are tons of new features including a new Kernel: TL:DR What’s New IoT Security A new IoT security controller to: Collect IoT devices and traffic attributes from certified IoT discovery engines

R80.20 SmartConsole Build 081 was released today. It is always a good idea to run the latest SmartConsole (Jumbo Fixes not necessarily, but SmartConsole updates tend to bring stability).

Three years now???