CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-11-19
robori robori is offline
Member
 
Join Date: 2006-10-28
Posts: 71
Rep Power: 2
robori has an average reputation (10+)
Default New to Connectra - please help

Hello,

I'm starting to manage a pair of Connectra 6000 hardware but the previous administrator had installed Secure Platform Ngx R60 on it. It's attached/managed by an R60 Mgmt Station and it's configured in a Load Balance 50%-50% with Cluster XL. It's used for SSL VPN access but I'd like to know how did the guy do to make it available for SSL VPN access, do you think he had just installed the R60 SPLAT and then installed the SSL Network extender on it ? If so, do you guys have a procedure or document for such an installation ?

One of the gateways is having an intermitent issue, it just looses network connectivity, and the green status led turns to orange. If we open the rack and turn off and on again, connectivity comes back. Have you guys seen a problem like that ?


Thanks in advance!

Robori.
__________________
CCSE NGX, CCNA, MCSE 2k, LPIc1, ITIL-F
Reply With Quote
  #2 (permalink)  
Old 2007-11-19
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 857
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: New to Connectra - please help

The SSL Network Extender is just a license enabled feature. Could it possibly be using SecureClient and then Visitor Mode or do the users have no client installed.

Installation is the same as anyother SPLAT system, Insert CD, reboot follow instructions.
Reply With Quote
  #3 (permalink)  
Old 2008-01-02
robori robori is offline
Member
 
Join Date: 2006-10-28
Posts: 71
Rep Power: 2
robori has an average reputation (10+)
Default Re: New to Connectra - please help

Hi,

Just catching up this post right now. The hardware is Connectra 6000 but they have installed Secure Platform / NGX R60 over it, and installed the SSL VPN Network Extender to enable the SSL VPN feature. The users use no client just a web URL to connect to the SSL VPN and it's been working fine for 2 years. Now the hardware is defective and we need to replace this box, so I'd like to know where I can see the SSL VPN Network Extender version and where I can download it to install it, because I'll need to rebuild the on the new replace Connectra box that CP is sending us.

Could you guys please help !?

Thank you!
Robori.
__________________
CCSE NGX, CCNA, MCSE 2k, LPIc1, ITIL-F
Reply With Quote
  #4 (permalink)  
Old 2008-01-02
robori robori is offline
Member
 
Join Date: 2006-10-28
Posts: 71
Rep Power: 2
robori has an average reputation (10+)
Default Re: New to Connectra - please help

Just found this:


/var/opt/CPsuite-R60/fw1/conf/extender/CSHELL/snx_install.sh

It must the Linux version of SSL VPN Network Extender, I guess....
__________________
CCSE NGX, CCNA, MCSE 2k, LPIc1, ITIL-F
Reply With Quote
  #5 (permalink)  
Old 2008-01-02
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 857
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: New to Connectra - please help

When you say has installed SPLAT NGX R60 over the top then you are saying that is running VPN-1 NGX R60, as opposed to the Connectra Software.

If you install VPN-1 NGX R60 then the SSL Network extender is allowed as part of the standard install. You just need to install the license, and install the security policy. The policy should not need to be touched, just build the replacement box with the same hostname etc and resic the object to it.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 18:38.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0