CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDefense
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-02-11
Senior Member
 
Join Date: 2007-06-05
Location: Canada
Posts: 183
Rep Power: 2
hotice_ has an average reputation (10+)
Default SD profiles: from ver 62+ -> SCS Only or SCS + Gateway?

Guys,
I know for a fact that you need R62+ to get the SmartDefense profile management feature.

My question is, does it require BOTH the SCS and the enforcement gateway to be at R62 or only the SCS at R62 and Gateway @ R61 would do?

Logically, I would tend to say that only the SCS needs to be at R62 since it is the one compiling the security policy and scripts before pushing but can anyone confirm?


Thanks
Reply With Quote
  #2 (permalink)  
Old 2008-02-11
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,660
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: SD profiles: from ver 62+ -> SCS Only or SCS + Gateway?

If you check the release notes for R62 it tells you what versions are compatible with profiles. I think its R60_HFA<something> and up, but I'm not sure.
Reply With Quote
  #3 (permalink)  
Old 2008-02-11
Senior Member
 
Join Date: 2007-06-05
Location: Canada
Posts: 183
Rep Power: 2
hotice_ has an average reputation (10+)
Default Re: SD profiles: from ver 62+ -> SCS Only or SCS + Gateway?

Got it...

According to Checkpoint NGX R62 release notes (Check Point Software Technologies: Download Center) , When installing policy to a gateway of version R60 or R61 (from a SmartCenter Server at R62), the default profile configuration settings for SMTP and FTP SmartDefense protections are installed, regardless of which profile has been applied to the gateway. All other SmartDefense protections are installed according to the profile selected.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 17:52.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0