Check Point NG[s]AI
Keeping SmartDefense up to date is key to maintaining its ability to protect your network. From the general SmartDefense menu, shown in Figure 13.15, you will notice that in addition to the Update Now button used to update SmartDefense, you have the option of having SmartDefense check for updates whenever SmartDashboard is started. Given the importance of frequent updates, it is a good idea to enable this feature.
An important thing to keep in mind regarding SmartDefense updates is that you need to have a current subscription license in order to receive updates. This license also entitles you to receive SmartDefense advisories, which include useful information that will assist in developing your security practices and defense strategies.
A number of types of updates are supported by VPN-1/FireWall-1 NG with AI s SmartDefense:
-
Dynamic attack protection These updates are for the core aspects of SmartDefense, allowing it to protect your network from newly discovered types of attacks.
-
INSPECT updates These updates augment the INSPECT scripts based on new vulnerability information.
-
HTTP worm signature Used to keep SmartDefense up to date for protection against newly released HTTP worms.
-
CIFS worm signature Similar to HTTP worm signatures but for protection against CIFS worms.
-
New services SmartUpdate will add protection for new services not originally part of its knowledge base.
-
P2P application signatures Protection for point-to-point applications such as instant messengers.
Once SmartUpdate completes its update, a notification popup window will be displayed to notify you. However, it is important to note that even though at this point your management console has been updated, the updates will not reach the enforcement point until you do a policy install.
Logging In to UserCenter
Before an update can be downloaded and installed, you will be prompted to log in to the Check Point UserCenter. The purpose of this step is to ensure that only users with valid SmartDefense update subscriptions can make use of downloaded updates. Simply enter your UserCenter username and password to proceed.