Autonomous Threat Prevention Management Integration Release Updates

Product: Security Gateways, Security Management
Version: R80.40 (EOS), R81 (EOS), R81.10 (EOS), R81.20, R82, R82.10
OS: Gaia
Last Modified: 2026-07-19

Solution

Introduction | Availability | Released Takes | Manual Installation | List of Resolved Issues

Introduction

Autonomous Threat Prevention Management (ATPM):

• New Threat Prevention management, that uses Smart Cyber Policy from the cloud.
• Provides out of the box Threat Prevention profiles based on business & IT security needs.
• Easy assignment of policy profile that is tailored to your needs.
• Automatic update of Threat Prevention policy profiles to protect against the latest cyber threats using the latest technologies.
• Zero day-to-day maintenance required from the administrator, while maintaining optimal security. Administrators still have manual configuration capabilities.

Example screenshot from SmartConsole:

The Autonomous Threat Prevention Management Integration packages are installed automatically on all relevant Check Point devices when Automatic Update downloads are enabled (see sk175504, section 2-B). If Automatic Updates are disabled, you can install Autonomous Threat Prevention Management Integration packages manually using the steps below.

Availability

Where:

• GOT_TPCONF, GOT_MGMT, and DC_INFRA - Packages for a Management Server
• GOT_TPCONF - A package for Security Gateways / Cluster Members / Scalable Platform Security Groups

Released Takes

Manual Installation (Offline)

1. On the Security Gateway / each Cluster Member / Scalable Platform Security Group, install the Autonomous Threat Prevention package GOT_TPCONF):
   1. Prepare a temporary directory:

      1. Connect to the command line on the Security Gateway / each Cluster Member / Scalable Platform Security Group.

      2. Log in to Expert mode:

         expert

      3. Create a temporary directory:

         • On the Security Gateway / each Cluster Member: mkdir -v /var/log/GwAtpUpdate
         • On the Scalable Platform Security Group: g_all mkdir -v /var/log/GwAtpUpdate
   2. Get the required Autonomous Threat Prevention package:
      1. Download the GOT_TPCONF package from the "Availability" section above to your computer.
      2. Copy the package from your computer to the Security Gateway / each Cluster Member / Scalable Platform Security Group to the temporary directory /var/log/GwAtpUpdate/).
   3. Get the Installation script:
      1. Download the installItpDarwin.sh script to your computer.
      2. Copy the Installation script from your computer to the Security Gateway / each Cluster Member / Scalable Platform Security Group to the temporary directory /var/log/GwAtpUpdate/).
   4. Go to the temporary directory:
      • On the Security Gateway / each Cluster Member: cd /var/log/GwAtpUpdate ; pwd
   5. Assign the "execute" permission to the Installation script:
      • On the Security Gateway / each Cluster Member: chmod -v +x installItpDarwin.sh
   6. Run the installation script:
      • On the Security Gateway / each Cluster Member: ./installItpDarwin.sh --local $(pwd)

When finished, the script shows "Finished".

2. On the Management Server, install the Autonomous Threat Prevention packages ( GOT_TPCONF_MGMT, GOT_MGMT, and DC_INFRA):

   1. Prepare a temporary directory:
      1. Connect to the command line on the Management Server.
      2. Log in to Expert mode.
      3. Create a temporary directory: mkdir -v /var/log/MgmtAtpUpdate
   2. Get the required Autonomous Threat Prevention packages:
      1. Download the GOT_TPCONF_MGMT, GOT_MGMT, and DC_INFRA packages from the "Availability" section above to your computer.
      2. Copy the packages from your computer to the Management Server to the temporary directory /var/log/MgmtAtpUpdate/).
   3. Get the Installation script:
      1. Download the installItpDarwin.sh script to your computer.
      2. Copy the Installation script from your computer to the Management Server to the temporary directory /var/log/MgmtAtpUpdate/).
   4. Go to the temporary directory: cd /var/log/MgmtAtpUpdate
   5. Assign the "execute" permission to the Installation script: chmod +x installItpDarwin.sh
   6. Run the Installation script: ./installItpDarwin.sh --local $(pwd) When finished, the script shows "Finished" and a list of the installed packages.
   7. In SmartConsole > Security Policies view > Threat Prevention, "Autonomous Threat Prevention" appears.

3. In SmartConsole, enable Autonomous Threat Prevention in the Security Gateway / Cluster Object:

   1. Connect with SmartConsole to the Management Server.
   2. From the left navigation panel, click the Gateways & Servers view.
   3. Double-click the Security Gateway / Cluster object.
   4. From the left tree, click General Properties.
   5. In the lower pane, click the Threat Prevention tab.
   6. Select Autonomous Threat Prevention.
   7. Click OK.

4. In SmartConsole, create an Autonomous Threat Prevention policy (if you already have a Threat Prevention policy package, skip to Step 5):

   1. In SmartConsole, in the top left corner, click the Menu icon and click Manage policies and layers.
   2. In the Manage policies and layers window, click New.
   3. Enter a name for the policy package.
   4. On the General page > Policy types section, select Threat Prevention (you can select more policy types if required).
   5. Click OK.
   6. In SmartConsole, from the left navigation panel, click the Security Policies view.
   7. In the Infinity Threat Prevention section, click Policy.
   8. From the top drop-down list with the five pre-defined profiles, select the required profile.
   9. Click OK.

5. In SmartConsole, install the Autonomous Threat Prevention policy:

   1. In SmartConsole, from the top, click Install Policy.
   2. Select Threat Prevention.
   3. Select the applicable Security Gateway / Cluster objects.
   4. Click Install.
   5. Test the Threat Prevention policy - download a malicious file (for example, EICAR) through the Security Gateway / Cluster.

List of Resolved Issues and New Features per Autonomous Threat Prevention Management Update

Article Properties

Access Level: General
Status: Approved
Date Created: 2020-06-10
Last Modified: 2026-07-19