|
|
|
This section contains general advice to help you manage the IPS Software Blade.
Check Point releases new IPS protections packages as necessary, usually at least once a week.
It is important to review the published Check Point IPS update. The update shows new protections against zero-day vulnerabilities. If the protections are crucial for your network, immediately deploy them in Prevent mode.
There is a risk that a new protection might disrupt legitimate traffic. However, there is a greater benefit in preventing active malware attacks.
It is important to review the Release Notes for new software versions, and regularly install software updates.
Check Point IPS combines the features of the IPS engine and new protections that are continually added. The engine is the core code that parses and inspects the traffic. It is often improved as part of software upgrades for Security Gateways.
These upgrades give better IPS protection and performance. For example:
The initial performance tuning focuses on a single IPS profile that is recommended for many situations. However, it can be necessary to create different profiles for the specified gateways in an organization to improve security or performance.
Examples of separate profiles:
