SSL VPN « My Check Point Blog

Archive for the ‘SSL VPN’ Category

R71.10 available

Thursday, July 15th, 2010

The new R71.10 update is available. Find all the resources on this page within UserCenter.

We now have Abra support on all gateway platforms, support for Outlook Web Access (OWA) 2010 over SSL VPN and R71.10 includes the hotfix for the SSL VPN blade, that was mandatory when using this blade with R70.

Please note that the R71.10 upgrade package cannot be installed on gateways with DLP.

Check Point also released complete packages for a fresh installation with R71.10 but they sadly don’t include UTM-1 images.

Tobias Lachmann

Posted in General, R71, SSL VPN, Software Blades | Comments Off

Certificate Signing Request (CSR) key size

Monday, June 21st, 2010

In a recent blog entry I described how you can use 3rd party certificates within your Check Point gateway.

Now I was informed by Brian that some commercial CA don’t sign any longer if the key size is only 1024 bit, you need at least 2048 bit.

How can we change the behaviour of the Check Point while issuing the CSR?

Just go to Global Properties -> SmartDashboard Customination -> Configure -> Certificates and PKI properties.

There we have an option the define the key size for the certificates. Available values are 1024, 2048 and 4096 bit.

Change this value according to your need and the requirements of the CA you chose for signing.

Starting with R71 they standard key size 2048.

Tobias Lachmann

Posted in General, SSL VPN | Comments Off

R71 SSL VPN blade – how sweet is this?

Thursday, June 17th, 2010

I’m not sure if anyone noticed it, but R71 comes with a brandnew SSL VPN blade. And I really like how quickly you can do the setup. After a few clicks it is running, providing a demo-application (world clock). Setting up the rest is a piece of cake.

Well done guys, well done!