Anti Spam

[kevin_turner]

i m using utm-1 450 with NGX 65 messaging security .....r these messaging feature active by default or we need to create some security server or anything for anti spam and anti virus?

[chuachongchee]

For anti-spam.. u'll need

1) NGX R65 with Messaging Security (New Version)
2) Antispam turned on
3) Appropriate license

[Thorpuse]

...And the question is, what is an appropriate license? Is there a 30-day subscription demo like there is (was?) for SmartDefense and AV/URL Filtering?

It's a bit rich to ask us to buy a product without a way to effectively evaluate it - especially something like an AntiSpam gateway which AFAIK only works as a tagging gateway, and doesn't offer any quarantine or blocking facility?

[chuachongchee]

Checkpoint licensing in the 1st place is never a "one license, get all features" kind of UTM, as with most vendors, only the firewall is default. AV, URLF, Anti-spam, Smartdefense, are all subscription based, tied with base component Smartdefense. The good thing, however, all modules are installed by default and turned on manually after the appropriate license is in.

The UTM-1 is a checkpoint appliance... the supposed NGX R65 with messaging security is the unlying app thats supposed to be only for UTM-1, and not available for traditional wintel/nokia/crossbeam~checkpoint.

Technically, however, it "can" be done i think, but i have tried vmware with 10gb hdd and it still wont install, i have no time for other testing soo far...

If you are looking to evaluate the anti-spam, i would recomend that you should get in touch with a checkpoint partner to do a POC.

[chillyjim]

Originally Posted by Thorpuse

...And the question is, what is an appropriate license? Is there a 30-day subscription demo like there is (was?) for SmartDefense and AV/URL Filtering?

It's a bit rich to ask us to buy a product without a way to effectively evaluate it - especially something like an AntiSpam gateway which AFAIK only works as a tagging gateway, and doesn't offer any quarantine or blocking facility?

There is an eval license available (Ask your reseller for a CPMP-EVAL-NGX) on standalone products.

The UTM-1 450 can be upgraded to a "Total Security" appliance that includes all of the approate licenses and subscriptions

[chuachongchee]

Originally Posted by chillyjim

There is an eval license available (Ask your reseller for a CPMP-EVAL-NGX) on standalone products.

The UTM-1 450 can be upgraded to a "Total Security" appliance that includes all of the approate licenses and subscriptions

Total Security.. yes.. but the Anti-spam is soo called an entire different image... NGX R65 w/ Messaging Security.. theres a reimage cd, as well as a seperate upgrade package....

[Thorpuse]

Originally Posted by chillyjim

There is an eval license available (Ask your reseller for a CPMP-EVAL-NGX) on standalone products.

Can you confirm that this eval license turns on the subscription service? It seems to want a subscription as well as the eval license for me, because at the moment I don't see the content and reputation scans matching anything.

[chuachongchee]

Originally Posted by Thorpuse

Can you confirm that this eval license turns on the subscription service? It seems to want a subscription as well as the eval license for me, because at the moment I don't see the content and reputation scans matching anything.

Eval License doesnt include the subcription.. not too sure.. but i think with the eval license, it turns on 30days smartdef subscription too... i may be wrong on this...

If not, you can get your checkpoint CCSP to plant the eval and run the 1st update for you... then u can start to play ard with it..

[chillyjim]

The last I heard was that the eval license enabled AV/AS updates as well but not SMDF.

[chuachongchee]

Originally Posted by chillyjim

The last I heard was that the eval license enabled AV/AS updates as well but not SMDF.

Correct me if i'm wrong..

For any and all updates.. isnt this so called tied down to Smartdef?? My understanding is that smartdef is the "base" module... on top of that, u can subscribe to AV, URLF, AS, Web Intel etc???

This is why we cannot buy the so called additional modules standalone update but must tied with base smartdef??

[Thorpuse]

I work for a CCSP - There used to be a 30-day eval subscription for SD services that we could create, but no more....

I just tried creating a 30-day EVAL, it clearly states that there is no messaging security subscription attached. I think that CP really does intend for us to take it on faith that this thing works.... is there a CP staffer monitoring this thread who can comment?

[chillyjim]

Originally Posted by Thorpuse

I work for a CCSP - There used to be a 30-day eval subscription for SD services that we could create, but no more....

I just tried creating a 30-day EVAL, it clearly states that there is no messaging security subscription attached. I think that CP really does intend for us to take it on faith that this thing works.... is there a CP staffer monitoring this thread who can comment?

Yes, and all I can tell you is what it is suppose to do. The eval license should enable messaging security per the product manager. If it is not, then it is likely something wrong with usercenter or just that UC hasn't been updated yet.

I will ask the question again and get back to you.

[chuachongchee]

Originally Posted by chillyjim

Yes, and all I can tell you is what it is suppose to do. The eval license should enable messaging security per the product manager. If it is not, then it is likely something wrong with usercenter or just that UC hasn't been updated yet.

I will ask the question again and get back to you.

My understanding is this... If i'm not mistaken.. all Evals are a "try all" kinda thing... coz all features are unlocked... Things such as AV, URLF are allowed... but there is no mention of those too... if i'm not wrong... Anti-Spam is allowed too....

But bear in mind, as i have mentioned b4, this is a so called totally different software bulid... not the same R65 UTM and typical UTM-1 as well, but if i'm not mistaken... the new stocks since Oct/Nov will come shipped with that alreaady..

[Thorpuse]

Originally Posted by chuachongchee

My understanding is this... If i'm not mistaken.. all Evals are a "try all" kinda thing... coz all features are unlocked... Things such as AV, URLF are allowed... but there is no mention of those too... if i'm not wrong... Anti-Spam is allowed too....

This understanding is mistaken - I have installed a new eval license and do not have the subscription services. There used to be a 30-day subscription license you could use. It's also possible that the 15-day initial license has some sort of subscription license on it. But I can say for sure that a 30-day eval does not do the trick.

[chuachongchee]

Originally Posted by Thorpuse

This understanding is mistaken - I have installed a new eval license and do not have the subscription services. There used to be a 30-day subscription license you could use. It's also possible that the 15-day initial license has some sort of subscription license on it. But I can say for sure that a 30-day eval does not do the trick.

Let me clarify this... I'm talking about the Features of Eval License... NOT the smartdef update... if you require that, your ccsp will be able to help gen you a eval license and help you to update the smartdef for the 1st time if you are doing a POC on that...

[chillyjim]

Confirmation from the Product Manager and the Licensing Manager. The CPMP-EVAL-NGX-EVAL does include 30 days of updates to anti-virus and anti-spam, as well as the features. This was just tested by the PM and it did work. The Licensing Manager confirmed that is also how it works and not a fluke.

I have asked for confirmation on SmartDefense updates and I will let you know what's going on there as well.

This is an official answer unlike most of my other posts.

[Thorpuse]

It probably works for the CP person because they have access via their staff account to a subscription contract. I'm calling BS on this, because I generated a 30-day eval last week, and just did a cplic print -p to get the complete feature set. I then took a cplic print -p from a license generated in October, two months before Messaging Security came out. The only difference in the feature strings is the date.

To re-iterate again... Messaging Security requires a service contract to turn on its content and reputation scanning, and be able to effectively evaluate the product. These service contracts are *not* included in a 30-day eval license. If anyone who is not a CP staff member has managed to get this working without purchasing a product with a service contract linked to a permanent Messaging Security subscription, I'd like to know.

Host Expiration Features
192.168.x.x 19Mar2008 cpmp-eval-1-ngx CK-F680A164XXXX

Contract Coverage:

There is no contract coverage for the above licenses.

[chillyjim]

I have received confirmation that the intended design is to now include SmartDefense and Messaging Security updates with the CPMP-EVAL-NGX-EVAL 30 day license with out any additional support contracts.

Should you be having issues with updates and have said license attached to the SmartCenter and Module you are trying to update, please contact account services and have your usercenter account fixed.


The thread --

**Note Tiya is the "Pricing & Licensing Manager" for Check Point
** Jony is the Product Manager for UTM-1
** I'm just a lowly SE with a big mouth :)


From Tiya ...

Yes it does

-----Original Message-----
From: Jim
Sent: Thursday, February 21, 2008 10:02 PM
To: Tiya
Cc: Jonathan
Subject: Re: Eval & AV/AS updates

Thanks folks. One more question, do it now include SmartDefense
updates as well? It seem like the 30 day trial is gone from the web
site.

-jlh

On Feb 20, 2008, at 1:33 AM, Tiya wrote:

Yes, it does

From: Jonathan
Sent: Tuesday, February 19, 2008 4:25 PM
To: 'Jim'
Cc: 'Tiya'
Subject: RE: Eval & AV/AS updates

Tiya: can you comment if the CPMP-Eval includes Messaging Security?

From: Jim
Sent: Tuesday, February 19, 2008 2:01 PM
To: Jonathan
Cc: 'Tiya'
Subject: Re: Eval & AV/AS updates
I don't see anything that says "Total Security" and I thought the
CPMP-EVAL-NGX-EVAL was going to activate the subscription as well.

-jlh


On Feb 19, 2008, at 2:18 AM, Jonathan wrote:


It does include it.

You should ask for Total Security EVAL for VPN-1 UTM or UTM-1.

We did a test yesterday and it worked fine.

Can you give me more details on those cases? Do we have a support
ticket? Do we have specific details?

Adding Tiya to the thread.
J

From: Jim
Sent: Monday, February 18, 2008 10:25 PM
To: Jonathan
Subject: Eval & AV/AS updates
Jony,

I thought that the NGX Eval license was suppose to enable AV/AS
updates now. I'm getting reports from the field it doesn't.

[Thorpuse]

Jim,

Sent you a PM with more details. This may be their intention, but there's something missing in the execution. I too would like to find this Total Security eval product....

[chillyjim]

So you folks know, there are several people reporting that the eval keys are not working as designed for updates. When I hear something new I'll post it hear.