Support Center > Search Results > SecureKnowledge Details
Check Point R75.20
Solution

For more information on Check Point releases see: release map, upgrade map, backward compatibility map.

Download Wizard - Find fresh install/upgrade software packages with just a few clicks. Click here.
See sk91060: Removing old Check Point packages and files after an upgrade.
Visit our Firewall & VPN Blades forum or any other Check Point discussion forum to ask questions and get answers from technical peers and Support experts.

For more information on R75.20, see the R75.20 Release Notes and R75.20 Known Limitations.

Table of Contents

  • What's New in R75.20
  • R75.20 Downloads
  • R75.20 Documentation
    • Gateway Documentation
    • Management Documentation
    • Other Documentation

 

What's New in R75.20

URL Filtering Software Blade

  • Integrated Rule Base for URL Filtering and Application Control policies.
  • User Check lets Security Gateways communicate with end users using the new "Inform" and "Ask" actions.
  • Cloud-based URL Filtering service dynamically categorizes Web traffic.
  • Lets users define new custom sites.
  • New tracking options: Extended Log and Complete Logfor auditing all URLs accessed during a Web session.
  • You can define URL Filtering policies with granularity at the user and user group levels, integrating with Identity Awareness.
  • URL Filtering is supported on more platforms, including IPSO and Windows.
  • Enhanced URL Filtering integration with SmartEvent and SmartReporter.

Application Control Software Blade

  • Integrated Rule Base for URL Filtering and Application Control policies.
  • User Check lets Security Gateways communicate with end users using the new "Inform" and "Ask" actions.
  • Lets users define new custom applications.
  • Download predefined application and category definitions from the Check Point Web site.
  • New tracking options: Extended Log and Complete Log for auditing all URLs accessed during a Web session.

Note: The term tags is changed to categories

DLP Software Blade

  • Enhanced email and Web enforcement:
    • Prevents data loss from HTTP/S traffic, such as Gmail and Facebook.
    • Inspects email messages between Exchange users and groups in an organization using the Check Point Microsoft Exchange agent.
    • Scans outgoing TLS (SMTPS) encrypted email using the Check Point Microsoft Exchange agent.
    • DLP HTTP/S inspection for non-standard ports.
  • Improved performance and high availability:
    • Web traffic performance improvements (connection rate, concurrent connections and throughput).
    • DLP-1 2571/9571 appliances have standalone and full high availability modes, in addition to the fail open NIC option.
    • ClusterXL load sharing (detect only).
  • 150 new out-of-the-box data types (total of 500 data types) make it easier to get started.
  • Enhanced visibility and administrative tools:
    • Rich DLP status and statistics for SmartDashboard and SmartView Monitor.
    • Administrators can send or discard quarantined email using SmartView Tracker and SmartEvent.
  • More ways to prevent administrators from seeing sensitive data:
    • Hide credit card numbers by showing only the last 4 digits in the logs.
    • Granular administrator permissions give more control over who can see DLP data.
  • Enhanced template data types:
    • New option to ignore empty templates during scanning
    • Dynamically load many templates into one data type.
  • Custom data types and other enhancements to the CPcode scripting language.


Identity Awareness Software Blade

  • Identity Acquisition (AD Query, Identity Agents and Captive Portal) is supported on IPSO platforms.


Mobile Access and IPSec Software Blades

R75.20 supports VPN authentication from many different devices. Users can have more than one user certificate for authentication with VPN clients, iPhone, iPad, or the Mobile Access portal.


HTTPS Inspection

  • Inspection of HTTPS traffic from enterprise networks to external destinations.
  • Granular inspection settings for different Software Blades.
  • Logging enhancements, including logs for IPS, DLP, Anti-Virus, URL Filtering and Application Control Software Blades.
  • New predefined queries.
  • Integrated into relevant event views and cards.
  • HTTPS inspection is supported on IPSO and SecurePlatform.
  • HTTPS Policies now include custom sites and URL Filtering categories.


SmartEvent Overview Customization

  • You can customize your Overview window by adding, deleting, configuring, moving and resizing panels.
  • You can change between different preconfigured overviews for different Software Blades (IPS, DLP, and
    URL Filtering).

SmartDashboard

  • Administrators can easily change the SmartDashboard access mode without closing and restarting
    SmartDashboard.
  • Administrators currently logged in using the Read Only mode can receive a notification when the
    Read/Write access mode is available. 

SmartEvent

  • User names are shown by default for administrators with Read/Write permissions.
  • You can choose if identities are shown or hidden by default for customized administrators.


Management Servers

These new features are in the Security Management Server and the Multi-Domain Server.

  • User and administrator expiration enhancements.
  • Notifications for expired and about to expire Users/Administrators.
  • Different procedures for configuring expiration dates.
  • New Permissions Profiles for Multi-Domain Security Management.


Uninstall Utility

Before R75.20, it was necessary to uninstall each major release package separately. R75.20 includes a new command line utility that silently uninstalls the old release ("Uninstalling" on page 25).
The uninstall Utility is available for:

  • Windows
  • Linux
  • IPSO
  • Solaris
     

Note: To uninstall an old release on SecurePlatform, use the Backup and Revert functionality.

 

Smart-1 25 is supported. Whenever Smart-1 25 is listed as supported, Smart-1 25B is as well, unless explicitly stated otherwise. See Smart-1 Downloads.

R75.20 Downloads

Note: In order to download some of the packages you will need to have a Software Subscription or Active Support plan.

R75.20 Documentation

Gateway Documentation


Management Documentation


Other

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment