You should confsider the fact that if you don't update to the lastest hotfix:
1. You will have to go through all the release notes for unapplied hotfixes if you change the way you use your firewall. 2. It is always better to be fully patched than "patched if the vulnerability applies to my situation". Maybe the vulnerability is not exploitable from the internet in your setup. But an attacker might be able to exploit it from an already compromised server in your network. You can almost be certain that the proccess of applying HFA-08 to a HFA-07 installation is more tested by checkpoint QA than the proccess of applying HFA-08 to a HFA-04 installation or any version prior to HFA-07. Staying up to date with security patches often breaks functionality. But i'll guess we'll have to live with that. /Simon -----Original Message----- From: Tom Stala [mailto:[EMAIL PROTECTED] Sent: 10. august 2004 17:02 To: [EMAIL PROTECTED] Subject: Re: [FW-1] Approach to hot fixes? Best practice in my opinion about anything, if it ai'nt broke don't fix it. If you upgrade to version 8 from 4 you might be braking something that was working fine. ----- Original Message ----- From: "Shane Presley" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 10, 2004 10:20 AM Subject: [FW-1] Approach to hot fixes? > Just curious... > > Do you regularly keep your firewalls up to date with the Check Point > hot fixes? Or do you wait for the need? For example I'm currently on > HFA-04, but HFA-08 is out. I've read the release notes on HFA-08 and > don't see anything that would immediately impact me, so I don't think > there's a pressing need to put HFA-08 on it. > > But is it a "best practice" to always apply the latest HFA? > > Shane > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
