> Source: [sk107166](https://support.checkpoint.com/results/sk/sk107166) # sk107166 - TLS1.2 Support Plan for Check Point Products | Property | Value | |----------|-------| | Solution ID | sk107166 | | Date Created | 2015-08-04 | | Last Modified | 2023-09-11 | | Technical Level | General | | Products | Security Gateway, Security Management Server | | Versions | R81.10 (EOS), R81 (EOS), R81.10 (EOS), R81 (EOS) | ## Solution **Background Information:** The general recommendation across the globe is to move to TLS v1.2: * SSLv3 has become insecure and deprecated and the last several attacks (POODLE 2, Freak, Logjam) were directed at TLS. * The Payment Card Industry Security Standards Council (PCI DSS / PCI SSC) set the date for mandatory support of TLS v1.2 to 30 June 2016. * PCI DSS set the date for transition to exclusive use of TLS v1.2 to [30 June 2018](http://blog.pcisecuritystandards.org/migrating-from-ssl-and-early-tls). * US-CERT recommends to move to TLS v1.1 or higher. **Check Point adds TLS v1.2 support for all the products, by dates specified below.** Most of Check Point products already support TLS v1.2, except for the products listed in the table below. These products will be updated according to the table below. Enter the string to filter this table: |---------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------| | Check Point Product | OS / Appliances | Check Point Software Version | Time Line ^(1)^ | | **Remote Access VPN Clients / Endpoint Security Clients** | Windows 7, Windows 8, Windows 8.1, Windows 10 | Since [E80.62 for Windows](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108375) | Dec 2015 | | **Remote Access VPN Clients / Endpoint Security Clients** | Mac OS X | Since [E80.62 for Mac OS X](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108375) | Feb 2016 | | **Remote Access VPN Clients / Endpoint Security Clients** | Windows XP, Windows Vista | Not Planned | Not Planned | | **Endpoint Security Management Server** | Gaia, Windows | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **VPN Plugin for PC and Windows phone** | Windows 8.1 | Windows update | No ETA | | **Capsule VPN for PC and Windows phone** | Windows 10 | New application version in Microsoft store | July 2016 | | **SSL Network Extender (SNX)** | Windows, Mac OS X, Linux | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **ICA Management Portal / Management Portal** | Gaia | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **ICA Management Portal / Management Portal** | Gaia | Since [R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) | May 2017 | | **Gaia Portal** | Gaia | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **Gaia Portal** | Gaia | Since [R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) | May 2017 | | **Platform Portal** | Gaia | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **Platform Portal** | Gaia | Since [R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) | May 2017 | | **Software Updates** | Gaia | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **Software Updates** | Gaia | Since [R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) | May 2017 | | **Mobile Access Blade** | Gaia | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **Mobile Access Blade** | Gaia | Since Security Gateway [R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) | May 2017 | | **Mobile Access Reverse Proxy** (refer to [sk110348](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110348)) | Gaia | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **Identity Agent** | Windows 8.1, Windows 10 | TLS v1.2 is already supported | - | | **Identity Agent** | Windows Vista, Windows 7, Windows 8 | Since Security Gateway [R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) | May 2017 | | **Identity Agent** | Windows XP | Not Planned | Not Planned | | **Secure Internal Communication (SIC)** | All | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **SmartConsole** | Windows | [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get an improved SmartConsole R77.30 that connects to Management Server with *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) **^(2)^** **TLS1.2 Support for R80.10:** [R80.10 SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119612) - starting from Build 042 | July 2017 | | **Mail Transfer Agent (MTA)** | Gaia | Since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) ^**(2)**^ | July 2017 | | **Mail Transfer Agent (MTA)** | Gaia | Since Security Gateway [R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111841) | May 2017 | | **LOM card GUI** | 4800 appliances | Since [LOM firmware v2.1.3](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk88064) | Jan 2016 | | **LOM card GUI** | 5000 appliances | Since [LOM firmware v3.19](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111776) | July 216 | | **LOM card GUI** | 12200, 12400, 12600 appliances | Since [LOM firmware v2.1.3](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk88064) | Jan 2016 | | **LOM card GUI** | 13500, 13800 appliances | Since [LOM firmware v2.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101241) | July 2016 | | **LOM card GUI** | 15400, 15600 appliances | Since [LOM firmware v3.19](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111776) | July 2016 | | **LOM card GUI** | 21700, 21800 appliances | Since [LOM firmware v2.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101241) | July 2016 | | **LOM card GUI** | 23500, 23800 appliances | Since [LOM firmware v3.19](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111776) | July 2016 | | **LOM card GUI** | Smart-1 25, 25B, 50, 150 appliances | Since [LOM firmware v3.46](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk93001) | July 2016 | | **LOM card GUI** | Smart-1 225, 3050, 3150 appliances | Since [LOM firmware v2.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101241) | July 2016 | | **LOM card GUI** | TE250, TE1000, TE2000 appliances | Since [LOM firmware v2.1.3](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk88064) | Jan 2016 | | **SMB Appliances:** **600 / 700 / 1100 / 1200R / 1400** | Gaia Embedded | Since [R77.20.40](http://supportcontent.checkpoint.com/solutions?id=sk113238) for Gaia Embedded OS | Oct 2016 | | **Private ThreatCloud** | Gaia | [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) for more information. | August 2018 | | **Threat Emulation** | TEX100X, TEX250X, TEX1000x, TEX2000X | R77.30 JHF 317 R80.10 JHF 142 R80.20 GA [](https://www.checkpoint.com/support-services/contact-support/) | June 2018 August 2018 September 2018 | | **DLP Exchange Agent** | [Windows Server](https://techcommunity.microsoft.com/t5/exchange-team-blog/exchange-server-edge-support-on-windows-server-2016-update/ba-p/606585) | | Q1 2020 | {#TLS_support_Table} **Notes:** 1. The schedule can be subject to modifications. For most up-to-date information, revisit this page or subscribe to RSS feed (at the top). 2. Support for TLS 1.2 was integrated since *Take 266* of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162). * The SIC initialization still communicates over SSLv3. * For VSX Gateway, refer to [sk112014 - "Cannot establish connection to SSL Network Extender gateway. Try to reconnect." error when connecting with SSL Network Extender to Mobile Access Portal on VSX Virtual System after installing the "TLS 1.2 Hotfix for R77.30"](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112014). * Before installing *Take 266* and higher of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162), make sure to back up *all* the current *httpd.conf* files: *\[Expert@HostName:0\]# find / -name httpd.conf -type f* If any changes were made in the past in the *httpd.conf* files, then the new *httpd.conf* files should be edited manually (do NOT overwrite the new files with the backed up files). * If a connection from a SmartConsole computer to a Security Management Server / Domain Management Server must also be TLS 1.2, then an improved SmartConsole can be provided (otherwise, the communication will be TLS 1.0). This requires *Take 266* and higher of [R77.30 Jumbo Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162) to be installed on the Security Management Server / Multi-Domain Security Management Server. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content