CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Disaster Recovery
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-03-28
karu1971 karu1971 is offline
Junior Member
 
Join Date: 2007-03-05
Posts: 4
Rep Power: 0
karu1971 has an average reputation (10+)
Default DR -document

Dear All,

When I document what are the main firewall parameters I need to take into account?

At the event of disaster, I should be able to rebuild, using this document.


Thankx Guna
Reply With Quote
  #2 (permalink)  
Old 2007-04-01
Bob_Zimmerman Bob_Zimmerman is offline
Junior Member
 
Join Date: 2007-03-30
Location: DFW, TX
Posts: 25
Rep Power: 0
Bob_Zimmerman has an average reputation (10+)
Send a message via AIM to Bob_Zimmerman
Default Re: DR -document

A good start would be any static routes and ARP entries you might add for manual NAT. Interface configuration. Hostname. 'router' configuration for SecurePlatform Pro.

Please note that I may have missed something. Basically, document everything you enter into the firewall manually. Fortunately, most of the complicated configuration is SmartCenter-side anyway.
__________________
Robert Zimmerman
Reply With Quote
  #3 (permalink)  
Old 2007-04-05
fwleno fwleno is offline
Junior Member
 
Join Date: 2006-07-25
Posts: 7
Rep Power: 0
fwleno has an average reputation (10+)
Default Re: DR -document

I suggest that you will run and document the output of the following commands:(SPLAT)
hostname
ifconfig
netstat -rn
/etc/resolv.conf
fw ver
cplic print -x

Than i suggest to run the upgrade_export and save the output away from the firewall on a secured location. if you will run it on a regular basis you will be able to restore the firewall in case of emergency.

I also suggest to prepare a "DRP KIT" that includes firewall installation CD and a document ddescribing the steps needed for firewall recovery.... this should be done for each management and firewall module.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 07:13.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0