CCSE 156-315.81 Checkpoint Study Notes

Security Gateway Clusters in Load Sharing mode are not supported by the Central Deployment feature in R81.20 SmartConsole. According to the Check Point R81.20 Known Limitations article1, Central Deployment in SmartConsole does not support:

• Connection from SmartConsole Client to the Management Server through a proxy server. In this case, use the applicable API command
• ClusterXL in Load Sharing mode
• VRRP Cluster
• Installation of a package on a VSX VSLS Cluster that contains more than 3 members.
• On Multi-Domain Servers: Global Domain, or the MDS context
• Standalone server
• Standby Security Management Server or Multi-Domain Security Management
• Scalable Platforms 40000 / 60000
• SMB Appliances

The other options are supported by the Central Deployment feature in R81.20 SmartConsole. Dedicated Log Server, Dedicated SmartEvent Server, and Security Gateways/Clusters in ClusterXL HA new mode can be selected as targets for installing packages using the Central Deployment wizard.

By default, Threat Emulation updates the engine on the Security Gateway once per day. This is the recommended frequency for optimal performance and security. However, the admin can change the update frequency to a different value, such as once an hour, once a week, or twice per day, depending on the network needs and resources. The admin can also manually update the engine at any time using the SmartConsole or the command line interface. References: Threat Emulation Engine Release Updates - Check Point Software, Check Point R81.20 Gaia Fresh Install and upgrade

The three types of tracking available for Threat Prevention Policy are Alert, SNMP trap, and Mail. These tracking options can be configured in the Threat Prevention tab of the SmartConsole, under the Policy section. The tracking options determine how the system notifies the administrator of events that match the policy rules. References: Configuring Threat Prevention Policy

According to the Check Point R81.20 documentation, the fw ctl Dyn_Dispatch enable command enables the CoreXL Dynamic Dispatcher on Security Gateway, which improves the performance of multi-core systems by dynamically balancing the traffic among the available cores1.

References1: CoreXL Dynamic Dispatcher - Check Point Software, section “Enabling the CoreXL Dynamic Dispatcher on Security