CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-08-20
Junior Member
 
Join Date: 2008-07-15
Posts: 24
Rep Power: 0
sushil has an average reputation (10+)
Default FTP to and from SPLAT

Hi,
Would like to know how to transfer files using ftp to and from SPLAT.

Logging onto UTM (SPLAT expert mode) and FTP from there on to remote windows_NT ftp server authenticates doesn't transfer files and something like session timeout message as well.I alos noticed it doesn't browse the destination directory on windows systems.


What is the best way to transfer the files to and from SPLAT.I need to transfer the output of export/improt tool into splat i.e .tar file.

Moreover FTP from windows to SPLAT(UTM failed).How to enable ftp port/services on SPLAT??

Reg,
Sushil
Reply With Quote
  #2 (permalink)  
Old 2008-08-20
Member
 
Join Date: 2006-03-08
Location: New Zealand
Posts: 96
Rep Power: 3
rubber_chicken has an average reputation (10+)
Default Re: FTP to and from SPLAT

First question - do you have "accept outgoing packets origination from gateway" turned on in global properties or do you have an explicit rule that allows this in your rulebase?

I'd tend to always do an FTP get/put from the gateway in question as opposed to pushing/pulling it to/from the device. The security aspect is the main consideration. Do you really want a rule allowing something to push files at your gateway? I'm not comfortable with it. I can see reasons why you might want to however.
Reply With Quote
  #3 (permalink)  
Old 2008-08-20
Senior Member
 
Join Date: 2007-07-16
Posts: 603
Rep Power: 2
Thorpuse has an average reputation (10+)
Default Re: FTP to and from SPLAT

Better is to use SCP. There's a bunch of good docos on how to set up cygwin/SSH for windows. Then edit the /etc/scpusers file and add the users who are allowed to scp data into the SPLAT device.

The FTP issue sounds like an active/passive mode one. But honestly, I'd leave that alone and just use SCP.
Reply With Quote
  #4 (permalink)  
Old 2008-08-21
Junior Member
 
Join Date: 2008-07-15
Posts: 24
Rep Power: 0
sushil has an average reputation (10+)
Default Re: FTP to and from SPLAT

Thanks for your guidance.
Here as far as ftp is concerned from SPLAT able to log on to windows machine and able to make the connection.But sending get command doesn't fetch any file with error file not found.

SCP I just started going through it.Got some documents.created/edited scpusers.Using Winscp from client machine to SPLAT.Somehow its not working or authenticating.
If you can suggest/guide some link on SCP that would be of great help.

Reg,
Sushil
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 08:15.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0