Release: Check Point NGX R62

Check Point continues to release new minor updated of its platform on regular basis, not changing the strategy already adopted with previous NG platform and its Feature Packs.

In NGX the company doesn't call new updates Feature Pack anymore but continue to release them every 4 months or so.

In the new R62 there are some interesting changes:

• Integry removing from Media Kit
  Integrity, the endpoint security solution Check Point obtained with ZoneLabs acquisition over 2 years ago, has been removed from package.
  Check Point included it in the R61 package but now already changed its mind, only allowing resellers to distribute it to interested customers.
  
  This is possibly to reduce piracy of the new product, already available in warez circuits.
  If so I don't think it's a very effective countermisure, only slowing down customers evaluation and adoption.



• Support for Windows Server 2003 Service Pack 2
  NGX R62 supports Windows Server 2003 Service Pack 2 even if at the moment of writing the SP2 is not yet released by Microsoft.
  
  While I'm sure Check Point has access to new builds much earlier than other beta tester, I don't remember the company ever supported a new operating system update so early.
  I strongly recommend to not install SP2 on your Windows Server 2003 machines at release time without extended testing for reliability and compatibility with Check Point products.



• Multiple SmartDefense profiles
  Finally customers are able to create several SmartDefense configurations from SmartDashboard and bind them to different gateways in the object database.
  In the same fashion SmartDefense can be disabled on gateway basis.



• Enhanced Log Forwarding
  Depending on your configuration Check Point gateways forward local log entries to the default SmartCenter Server log server, or to additional Log Servers configurated as stand-alone tiers.
  In this process log entries are stored locally, forwarded to the right location, and finally deleted locally.
  
  In the NGX R62 all logs can be forwarded directly, without local storing.
  I don't see this feature particularly safe to use, because it's necessary to evaluate what happens if, during the forwarding, link goes down.

The NGX R62 supports backward compatibility down to NG FP3.
Older installations have to be upgraded to NG AI [R54] and then migrated to NGX R62.


A last note about build version: tracking Check Point platform updates can be very hard because every single component has a different build numering.
NGX R62 has following build numbers for major components:

• VPN-1 (Power / UTM on any OS) - 120


• SmartCenter Server - 021


• SmarConsole - 618000131



• SecurePlatform - 031