Secure IT

Malware Displaying Porn Ads Discovered in Game Apps on Google Play by Check Point Research Team posted 2018/01/12   In the past, cyber-criminals have targeted businesses, hospitals, and governments; today, we’ve seen them begin to focus on games and apps intended for children. Check Point Researchers have revealed a new and nasty malicious code on Google Play Store that hides itself inside roughly 60 game apps, several of which are intended for children. According to Google Play’s data, the apps have been downloaded between 3 million and 7 million times. Dubbed ‘AdultSwine’, these malicious apps wreak havoc in three possible ways: Displaying ads from the web that are often highly inappropriate and pornographic. Attempting to trick users into installing fake ‘security apps’. Inducing users to register to premium ser...

Configuring Proxy ARP for Manual NAT Symptoms After creating a Manual Static NAT rule, Security Gateway does not answer the ARP Requests for the Static NATed IP address that was configured in the Manual NAT rule. Security Gateway replies to ARP requests with a wrong MAC address, mostly for the NAT traffic.  Introduction Let us consider the following scenario: Two networks ( Network_A  and  Network_B ) are separated by a Security Gateway (single Security Gateway or ClusterXL). On each network, there is a host ( Host_A  on  Network_A ,  Host_B  on  Network_B ). Let us assume, that  Network_A  represents the  Internal  network, and  Network_B  represents the  External  network. According to the existing standards, when  Host_B  needs to send data to  Host_A , an ARP Request for the MAC address of  Host_A  will be sent by  Host_B  to  Network...

How to Install Gaia on an IP Appliance Youtube Click HERE   How to Install Gaia on an IP Appliance   Objective : Clean installation of Gaia on an IP Appliance with IPSO Set up the environment: Procedure : Step 1: Get the IPSO to Gaia boot-manager package and the Gaia ISO image. https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowupgradewizard Step 2: Point the Gaia ISO on an FTP server: Method: Using Isomorphic tool transfer the image file and make pen drive bootable.   Then transfer the contents of same pen drive to the pc where ftp server is configured. Extract it and place it in a folder (here the folder name is GAIA).] After extraction, you have to run the  *.bat  file.   Open up a command prompt, a black screen comes up. Drag and drop your .bat file onto the window. If that doesn’t work us cd (change directory) to go to where the file is and then press enter. I'll give...

DLP CONFIGURATION WITH EXCHANGE AGENT DLP CONFIGURATION WITH EXCHANGE AGENT Pre-requisites 1.Windows Server with MS Exchange Installed 2.GW with DLP blade enabled 3.Exchange Agent Configuration 1.Enable DLP on the gateway and also enable user check client support with out which the end user will not get any user check messages. Also allow notification emails so that users using outlook can get notification mails. Enabling self handling is also important since the user can login to the portal and either send the mail or discard it from the dlp portal gateway properties and dlp portal details are as below. 2.Once you have installed the Exchange server on your windows server you can install exchange agent on the exchange server. And configure the same in smart dashboard under dlp tab > Gateways refer to screen shot below. 3.Once you have installed the the exchange agent on both exchange server as well as on dashboard you can initialize t...

Backup Checkpoint Firewall Youtube Click HERE Best Practices - Backup Checkpoint Firewall  1. Introduction There are a few methods to perform a backup of your Check Point system running Gaia OS. They differ by size, time of creation and content. This article provides an overview of all available backup methods and recommendation for configuring effective backup scheme. The built-in Gaia backup procedures: Snapshot Management System Backup (and System Restore) Save/Show Configuration (and Load Configuration) All methods can be used to backup your Security Gateways, Security Management and Multi-Domain Server. All methods are appliance-specific and can only be restored on the same model of appliance. 2. Snapshot Management The snapshot creates a binary image of the entire root ( lv_current ) disk partition. This includes Check Point products, configuration, and operating system. Starting in  R77.10 , exporting an image from one mach...

How To Troubleshoot SIC-related Issues in Checkpoint GAIA How To Troubleshoot SIC-related Issues in Checkpoint GAIA How To Troubleshoot SIC-related Issues in Checkpoint GAIA:- SIC  or Secure Internal Communication is how communicating  components  authenticate between themselves and the Security Management Server. When successfully  authenticated , communication between these components is secure. This  Check  Point feature ensures that these modules can  communicate  freely and securely using a simple communication initialization process, The following security measures are taken to  ensure  the safety of SIC:- Certificates for authentication Standards-based SSL for the creation of the secure channel 3DES for encryption Almost everytime SIC issues are due to :- 1. mismatch in  activation key  or 2. sic ports being blocked Today i am going to show you, How to troubleshoot mismatch SIC? ...