Saturday, June 4, 2016

Check Point 1140 IPS, Anti-Bot, Anti-Virus

Activating the IPS and Anti-X features on Check Point 1140 appliance is pretty straightforward. You just have to enable the feature and it will automatically get an update from Check Point database.


You can choose the IPS policy to install and have the option to enable logging.






You can choose the protection (confidence) settings for the Anti-Virus and Anti-Bot and have the option to enable logging.


You go to Threat Protection tab > IPS Protections to check the signature database. To change the behavior of a signature, just double-click on the specific signature (i.e. Ping of Death), tick Override IPS policy action and choose either Prevent or Inactive (optionally enable Log).







It took around 30 minutes for the IPS and Anti-X database update to complete.

No comments:

Post a Comment