So I have been updating the Check Point IPS signatures in my lab more aggressively lately, and flipped (almost all) of them into “protect” mode. I have noticed some of the signatures are detecting issues with some well known products
I am now CASU certified…

I have been working with Algosec AFA a lot these past few years on some pretty big projects. As far as a firewall policy compliance tool, it is the best out there by far (and I have used
Check Point SKO 2015
I got back today from Check Point 2015 SKO (sales kick off) and it was great. We had a day and a half in some of the more technical areas of the product line. The R80 SmartConsole tools are
Use the Correct Android App for Capsule
I’ve been testing Check Point’s new Capsule a lot lately. I am pretty impressed with what I have seen so far. The client apps create a VPN tunnel to your gateway in Check Point’s Capsule Cloud. There is a slight
Tragic Loss: Michael Hamelin
I received very sad news the other day that Michael Hamelin was killed in a car accident in Texas. I met Michael at Tufin a few years ago when he was the Chief Security Architect. He was a great thinker
Holiday Lights…
Burning in six 12200s for a customer. Has a nice glow to it…
CPUG is back online…sort of…
I got the following page at about Midnight CST: I was able to login with my original credentials, but there is no content restored at this point. Looks like Netanium in Massachusetts
Changing the Upgrade Diagram…Again
There have been some changes in the R75.40 to R77.20 versions. Since there are two OS version options (GAiA and SPlat) things have have gotten even more complex. I hope to have this better documented in the next few days.
Check Point Retiring the CCMA
It was announced yesterday that Check Point is retiring the CCMA certification. Apparently there is a new certification in development in Israel called the CCSM. There will be an accompanying course for the CCSM, and it is supposedly undergoing “final
R77.20 is Available
R77.20 was released on July 3rd. It addresses a lot of stability issues, which is why I was recommending to my customers that they stay on R75.47 unless they needed some of the new functionality in R77.x. From the
