CP R71.40 Releasenotes

download CP R71.40 Releasenotes

of 24

  • date post

    08-Oct-2014
  • Category

    Documents

  • view

    38
  • download

    7

Embed Size (px)

Transcript of CP R71.40 Releasenotes

R71.40

Release Notes

18 August 2011

Classification: [Public]

2011 Check Point Software Technologies Ltd. All rights reserved. This product and related documentation are protected by copyright and distributed under licensing restricting their use, copying, distribution, and decompilation. No part of this product or related documentation may be reproduced in any form or by any means without prior written authorization of Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR 52.227-19. TRADEMARKS: Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks. Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of relevant copyrights and third-party licenses.

Important InformationLatest SoftwareWe recommend that you install the most recent software release to stay up-to-date with the latest functional improvements, stability fixes, security enhancements and protection against new and evolving attacks.

Latest DocumentationThe latest version of this document is at: http://supportcontent.checkpoint.com/documentation_download?ID=11894 For additional technical information, visit the Check Point Support Center (http://supportcenter.checkpoint.com).

Revision HistoryDate 18 August 2011 03 July 2011 Description Removed R70.30 from the upgrade path First release of this document

FeedbackCheck Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments (mailto:cp_techpub_feedback@checkpoint.com?subject=Feedback on R71.40 Release Notes).

ContentsImportant Information .............................................................................................3 Introduction .............................................................................................................5 What's New ..............................................................................................................5 Included Releases ............................................................................................... 6 Platform Provisions and Requirements ................................................................6 Supported Upgrade Paths ................................................................................... 6 Supported Security Products by Platform ............................................................ 7 Security Software Containers by Platform ....................................................... 7 Dedicated Gateways ....................................................................................... 7 Security Gateway Software Blades by Platform .............................................. 8 Security Management Software Blades by Platform........................................ 9 Clients and Consoles by Windows Platform .......................................................10 Minimum System Requirements .........................................................................10 Required Disk Space ..........................................................................................11 Build Numbers ....................................................................................................12 Installing R71.40 ...................................................................................................13 New Installation ..................................................................................................13 Installing the Client Applications .........................................................................14 Upgrading from R70.40 ......................................................................................14 Upgrading from R71 or Higher ............................................................................14 Upgrade Packages ........................................................................................15 Upgrading with the SecurePlatform Web User Interface ................................16 Upgrading with the Command Line ................................................................17 Upgrading with the Command Line for IPSO Flash-Based .............................18 Upgrading with SmartUpdate .........................................................................19 Upgrading with the SecurePlatform Embedded Web User Interface ..............19 IPS Pattern Granularity Installation ................................................................19 Uninstalling .........................................................................................................20 Configuring the R71.40 Features .........................................................................21 Configuring Implied IPS Exceptions ....................................................................21 Configuring Secure Workspace Applications by Vendor .....................................21 Configuring Windows Vista or Windows 7 for Mobile Access Portal ...................22 Configuring IPS Pattern Granularity....................................................................23 Activating New Protections ............................................................................24 Network Exceptions for the New Protections .................................................24 Handling Multiple Matches of a Pattern ..........................................................24

Included Releases

IntroductionThank you for updating to Check Point version R71.40. This version contains new features and resolves various issues for Check Point Software Blades. Please read this document carefully before installing. For more information about R71.40 and to download the software, go to the R71.40 Home Page (http://supportcontent.checkpoint.com/solutions?id=sk63761). Known Limitations are listed in sk63762 (http://supportcontent.checkpoint.com/solutions?id=sk63762). Resolved Issues are listed in sk63763 (http://supportcontent.checkpoint.com/solutions?id=sk63763).

What's NewUpgrade from R70.40 directly to R71.40 Security Management IPS improvements SmartEvent enhancements Increase pattern granularity - Header rejection, Http worm catcher and Cifs worm catcher patterns were converted into separate protections, giving more granularity in their settings. This feature is installed during the first IPS update process (online update, offline update or scheduled update). Implied exceptions - Built-in exceptions to allow Check Point products trusted traffic.

Support for UTM-1 Edge 8.2 gateways

Security Gateway IPS Geo database - The Geo country-ranges database accuracy has been significantly improved.

Security Gateway 80 Series Support for VPN Link Selection Support for local masters file Improved communication when Security Management server is behind NAT Support for IGMP Proxy

Windows 7 32-bit and 64-bit Support Secure Workspace supports Windows 7 32-bit and 64-bit. Mobile Access clients with Windows 7 64-bit can connect to Connectra and SSL VPN gateways Support for SSL Network Extender Application mode and Network mode for Windows 7 32-bit and 64bit.

Enhanced Secure Workspace Faster and better performance. Enhanced allowed application configuration by software vendor. You can easily allow all applications from a specific vendor.

VPN ClientThis version includes a deployment package of Endpoint Security VPN R75, which replaces SecureClient and Endpoint Connect. For automatic deployment of the new VPN client, select a client upgrade mode in Global Properties > Remote Access > Endpoint Connect.

Introduction

Page 5

Included Releases

Included ReleasesThis release includes all features and fixes that were included in R71.30. See the R71.30 Release Notes (http://supportcontent.checkpoint.com/documentation_download?ID=11714). This release includes the Windows 7 64-bit Hotfix for Connectra NGX R66.1 and SSL VPN R71.30.

Platform Provisions and RequirementsIn This Section Supported Upgrade Paths Supported Security Products by Platform Clients and Consoles by Windows Platform Minimum System Requirements Required Disk Space Build Numbers 6 7 10 10 11 12

Supported Upgrade PathsIf you are upgrading from a lower version, make sure you can do the necessary intermediate upgrades. Product Security Gateway Security Management Server Provider-1 MDS Version R70.40 R71 R71.10 R71.20 R71.30 R70.20 and lower, down to NGX R65 First upgrade to R71.10, then install the appropriate package. Upgrade Path Direct - Install the appropriate package ("Upgrading from R70.40" on page 14) on the existing installation.

lower than NGX R65 First upgrade to NGX R65, then upgrade to R71.10. Security Gateway Series 80 Get image: fw1_R71_730156065_HFA40.img

Notes - This release is automatically activated on all Provider-1 Domains. For advanced upgrade procedures, see the R71.40 Advanced Upgrade and Migration Guide (http://supportcontent.checkpoint.com/documentation_download?ID=12194).

Platform Provisions and Requirements

Page 6

Supported Security Products by Platform

Supported Security Products by PlatformThese tables show the security products related to this release and on which platforms they are supported.

Security Software Containers by PlatformSoftware Blade Containers Check Point Platforms and Operating Systems

Secure Platform Security Management Security Gateway Provider-1 MDS

Security