CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 72 attendees signed up from 20 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point VPN-1 Edge Appliances
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-07-18
dantro dantro is offline
Senior Member
 
Join Date: 2007-02-07
Location: Halle (Saale)
Posts: 230
Rep Power: 2
dantro has an average reputation (10+)
Default Firmware 7.5.23x

Has anyone already installed the new VPN-1 Edge firmware 7.5.23x (EA)? What are your experiences? How well does it operate in a central management? Older firmwares had some issues with centrally installed automatic NAT rules.

The new firmware also introduces an exciting new look similar to the Check Point website and NGX (R65) products. I like it. What about you?

Best regards,
Danny Trommer
CCSA/CCSE/CCSE+
Reply With Quote
  #2 (permalink)  
Old 2007-07-19
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 993
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: Firmware 7.5.23x

Generally speaking unless instructed by Sofaware I tend to steer clear of upgrading to EA software.

Not really sure I would call the new look exciting either, it works and seems better then the previous efforts though.
Reply With Quote
  #3 (permalink)  
Old 2007-07-20
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,632
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Firmware 7.5.23x

Quote:
Originally Posted by dantro View Post
Has anyone already installed the new VPN-1 Edge firmware 7.5.23x (EA)? What are your experiences? How well does it operate in a central management? Older firmwares had some issues with centrally installed automatic NAT rules.
In my testing the NAT policy seems to work very well. In general it seem to be just fine, the web UI also seems faster too me.


I haven't done much with it yet, I've been on the road too much.
Reply With Quote
  #4 (permalink)  
Old 2007-08-25
buulam buulam is offline
Junior Member
 
Join Date: 2006-10-15
Posts: 23
Rep Power: 0
buulam has an average reputation (10+)
Default Re: Firmware 7.5.23x

I would love a simple text and tables UI, at least as an option. These things are meant for remote sites and that can often mean satellite-only access with huge latency!
Reply With Quote
  #5 (permalink)  
Old 2007-08-26
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,632
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Firmware 7.5.23x

There is always the command line, that's how I deal with my slow one. Although I have to say, once installed I do most of the management via SmartDashboard
Reply With Quote
  #6 (permalink)  
Old 2007-08-27
dantro dantro is offline
Senior Member
 
Join Date: 2007-02-07
Location: Halle (Saale)
Posts: 230
Rep Power: 2
dantro has an average reputation (10+)
Default Re: Firmware 7.5.23x

We've made various tests and already reported an error to Sofaware. The connection tracking does not show any red or blue entries, just green (accepted) rules. Sofaware already knew about it and told us they are working hard to fix this.

Last edited by dantro; 2007-08-27 at 16:26.
Reply With Quote
  #7 (permalink)  
Old 2007-08-27
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,632
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Firmware 7.5.23x

Quote:
Originally Posted by dantro View Post
We've make various tests and already reported an error to Sofaware. The connection tracking does not show any red or blue entries, just green (accepted) rules. Sofaware already knew about it and told us they are working hard to fix this.
ruin my day, I thought the number of scans just went down :(

Have to check what version I'm running now, because I do get "red" entries, off of security/Firewall rules anyway.

***** Update *****

OK looking at one right now 7.5.23x I see Red, Orange (bad yellow I assume) blue and green in the log.

Not saying this isn't an issue, but it looks like its not a solid "No drops show up in the logs".

So Folks -- If you are seeing "Reds" in your logs don't assume its not a problem.

Ahh the fun of Beta code...

Last edited by chillyjim; 2007-08-27 at 06:29. Reason: Update
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 08:05.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0