Activity Stream
-
Older Activity
-
2 Days Agocciesec2006 started a thread have you ever seen this and how do you go about solving it? in MiscellaneousI have a Provider-1 with a single CMA running R77.30 with JHFA_216. The CMA manages about 8 pairs of ClusterXL running H/A also R77.30 with...0 replies | 66 view(s) -
2 Days Agomrlsousa replied to a thread VPN with certificate between Cisco and Checkpoint in IPsec VPN Blade (Virtual Private Networks)Hi did you manage to find de document ? Regards11 replies | 4748 view(s)
-
3 Days AgoRather than importing into Excel, it may be worth processing the file with PowerShell first. For example, I use this to trim a file down to just the...5 replies | 78 view(s)
-
3 Days AgoWell, "other duties as assigned" prevented my testing yesterday. I did so today and have encouraging results. Thank you for the great insights...5 replies | 78 view(s)
-
4 Days Agomjensen replied to a thread Move VLAN interface between bond in Clustering (Security Gateway HA and ClusterXL)I had a similar issue yesterday moving VLAN interfaces between bond groups and the passive security gateway in the cluster remained down. After...2 replies | 113 view(s)
-
4 Days Agox86_64 in the uname output indicates it's running in 64-bit mode, and vg_splat-lv_current indicates GAiA. Files bigger than 2 GB aren't an issue on...5 replies | 78 view(s)
-
4 Days AgoThank you very much! I was using CP_R77_CLI_ReferenceGuide for command structure, they do not note the -z or -s switches, this is nice to know. I...5 replies | 78 view(s)
-
4 Days AgoI'll answer your second question first. Check Point's native log format records some fields like IP address in binary rather than text. An IP address...5 replies | 78 view(s)
-
4 Days AgoSM225 running R77.30 Our logs rollover at midnight every day. Typical log file contains 6-7 million records and a size of approx 1.3 GB. Having...5 replies | 78 view(s)
-
5 Days Agojuvann replied to a thread Move VLAN interface between bond in Clustering (Security Gateway HA and ClusterXL)I have found this thread https://www.cpug.org/forums/showthread.php/20117-ClusterXL-Remove-one-interface-from-monitoring I don't know if is the...2 replies | 113 view(s)
-
5 Days AgoShadowPeak.com replied to a thread Appliances 5900 R80.10 and bonding interfaces limited throughput in Clustering (Security Gateway HA and ClusterXL)Great, thanks for the follow-up.6 replies | 150 view(s)
-
5 Days Agojuvann started a thread Move VLAN interface between bond in Clustering (Security Gateway HA and ClusterXL)Hi, I have a R80.10 and ClusterXL, my confguration is simple 2 bond interfaces and more VLAN interface on both bond interfaces. I need to...2 replies | 113 view(s)
-
6 Days Agojuvann replied to a thread Appliances 5900 R80.10 and bonding interfaces limited throughput in Clustering (Security Gateway HA and ClusterXL)Thank you to all for suggestions! I solved my issue. I enabled multi queue on ethernet in bond interfaces, and now I got all 2Gpbs with multi...6 replies | 150 view(s)
-
6 Days AgoBob_Zimmerman replied to a thread How do you tell if there is a DOS attack on Firewall in Firewall BladeThere are a few different kinds of attacks: volumetric, where all of the time slots on a given link are consumed by junk traffic; boring attacks such...1 replies | 102 view(s)
-
6 Days Agocciesec2006 replied to a thread Appliances 5900 R80.10 and bonding interfaces limited throughput in Clustering (Security Gateway HA and ClusterXL)I assume that you also have this command on your Cisco switches: port-channel load-balance src-dst-ip On Cisco newer switches, you also see...6 replies | 150 view(s)
-
6 Days AgoShadowPeak.com replied to a thread Appliances 5900 R80.10 and bonding interfaces limited throughput in Clustering (Security Gateway HA and ClusterXL)Please provide output of the following commands run on the firewall from expert mode: fwaccel stat fwaccel stats -s grep -c ^processor...6 replies | 150 view(s)
-
1 Week AgoHi All In a nutshell, what are the best stats to look at on the firewall if you are receiving some sort of DOS attack, such as syn floods etc? ...1 replies | 102 view(s)
-
1 Week Agojuvann replied to a thread Appliances 5900 R80.10 and bonding interfaces limited throughput in Clustering (Security Gateway HA and ClusterXL)Yes SecureXL is enabled and yes I have used iperf for test. With cpview I can't see none CPU with 100% usage.6 replies | 150 view(s)
-
1 Week Agocciesec2006 replied to a thread Appliances 5900 R80.10 and bonding interfaces limited throughput in Clustering (Security Gateway HA and ClusterXL)A few questions for you: 1- Is SecureXL enabled? 2- How do you perform the test? Are you using Iperf to do this test? My guess is that you...6 replies | 150 view(s)
-
1 Week Agojuvann started a thread Appliances 5900 R80.10 and bonding interfaces limited throughput in Clustering (Security Gateway HA and ClusterXL)Hi guys, I have a clusterxl with two appliances 5900 and Gaia OS R80.10. Network is configured with 2 bond interfaces 802.3ad layer 3+4, each...6 replies | 150 view(s)
-
1 Week Agocciesec2006 replied to a thread VPN - Encryption Domain in IPsec VPN Blade (Virtual Private Networks)Unfortunately, this is one of the problems when you use Checkpoint as a VPN device. You would not have this problem if you were using Cisco IOS...1 replies | 136 view(s)
-
1 Week AgoHi, Say I have an Encryption domain that contains a supernet 10.50.0.0/16. I have this in the domain to allow VPN users to connect to any host in...1 replies | 136 view(s)
-
1 Week AgoHello, Has anyone here every used Cisco's Overlay Transport Virtualization (OTV) data center technology in data centers with physical Check Point...0 replies | 103 view(s)
-
1 Week AgoPhoneBoy replied to a thread Security Management Server migration in Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))While yes, in general, most software downloads require a software subscription, we do allow download of R80.10 by design (mostly for evaluation...8 replies | 436 view(s)
-
1 Week Agomsjouw replied to a thread Resetting the cadmin password in Clustering (Security Gateway HA and ClusterXL)Users are not "controlled by" cadmin but by a user with the RBA Admin role. What I mean by adding a space, is you login with ssh to the FW and use...3 replies | 139 view(s)
-
1 Week AgoGingerwerewolf replied to a thread Resetting the cadmin password in Clustering (Security Gateway HA and ClusterXL)Thanks for the reply Unless you log in as cadmin, you cannot change its password. Because the Cloning Group controls users, then you cannot change...3 replies | 139 view(s)
-
1 Week Agosimbur replied to a thread Security Management Server migration in Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))Hi all, Thanks for talking the time to respond... unfortunately I am stuck at this point. For some reason I am able to download R80.10 clean...8 replies | 436 view(s)
-
1 Week Agocciesec2006 replied to a thread Issue with site to site vpn to cisco ASA - HELP in IPsec VPN Blade (Virtual Private Networks)that is not true. In both Cisco IOS and ASA, you can set phase 2 specifically to a particular tunnel. If you do not set it, it will take the global...7 replies | 479 view(s)
-
1 Week Agomsjouw replied to a thread Resetting the cadmin password in Clustering (Security Gateway HA and ClusterXL)Anything that is cloned in the Cloning group is really copied to both members and stored locally in each members own config. In the WebUI you...3 replies | 139 view(s)
-
1 Week AgoGingerwerewolf replied to a thread Issue with site to site vpn to cisco ASA - HELP in IPsec VPN Blade (Virtual Private Networks)Something to remember is that Phase 1 and Phase 2 lifetimes on Cisco devices are set "Globally" and that if that Cisco device is running a whole load...7 replies | 479 view(s)
