CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Search:

Type: Posts; User: julzor

Search: Search took 0.00 seconds.

  1. Re: Struggling with Identity Awareness : Auth on domain X, fetch group on domain Y

    Thank you all for the answers!

    I could finally make it works with Identity Collector Alias features and some filters.

    Your assumptions are right : user are NOT authenticated on the CheckPoint...
  2. Struggling with Identity Awareness : Auth on domain X, fetch group on domain Y

    Hi everybody,

    I've recently started to put my hands on the Identity Awareness Blade, exploring all the possibilities that it offers (Captive Portal, custom via API, etc...).

    I've been working...
  3. Re: UDP Flood on Deny rule (Downtime) - Drop Optimization??

    I’m still digging into the issue and I found interesting but odd things.

    Here is the detail.

    After enabling the Drop Optimization on the SmartCenter, I tried to verify in CLI that if it was...
  4. UDP Flood on Deny rule (Downtime) - Drop Optimization??

    Hi,

    A few times per year, we face a problem with machine being infected and/or acting weirdly by sending a TON of UDP packets towards destinations protected by a Deny rule.

    This leads the...
  5. Replies
    13
    Views
    3,699

    Re: ClusterXL : connection drop when Policy Push

    Hi,

    Thank you everybody for your replies.

    Yes, i have re-activated DD since it didn't solve the issue; it doens't look related to this feature.

    I tried to enable "Keep all connections" for...
  6. Replies
    13
    Views
    3,699

    Re: ClusterXL : connection drop when Policy Push

    Hi again,

    I tried to disable DD this morning on my cluster.

    Everything went fine, but sadly it didn't work : i still lose some Access Points when a Policy is Pushed :-(

    I still get these...
  7. Replies
    13
    Views
    3,699

    Re: ClusterXL : connection drop when Policy Push

    Thank you !

    I will try this ASAP.

    I just verified the DD "mode" on all our firewalls and it's "Off" on R77.30 and "On" on R80.10.

    Sadly we have also 24 CP Standalone gateway, and it's gonna...
  8. Replies
    13
    Views
    3,699

    Re: ClusterXL : connection drop when Policy Push

    Hi,

    Here the messages shown by the firewall when the policy is pushed :

    ;[cpu_2];[fw4_1];fw_log_drop_ex: Packet proto=17 x.x.x.x:5246 -> y.y.y.y:50813 dropped by fw_handle_old_conn_recovery...
  9. Replies
    13
    Views
    3,699

    ClusterXL : connection drop when Policy Push

    Hi,

    I have a problem on my CP 12200 Cluster.

    When i push a policy to the cluster, some connections are getting "dropped".

    Actually, i see between 200 & 400 WiFi access point (~30% of all the...
  10. Replies
    5
    Views
    3,360

    Re: DHCP drop on ClusterXL after R80.10 upgrade

    Hi,

    I fixed the issue before viewing all the answers.

    Actually, the solution was quite "simple", but hard to find...

    The problem was that some DHCP Relay "Session" established using the...
  11. Replies
    5
    Views
    3,360

    DHCP drop on ClusterXL after R80.10 upgrade

    Hi,

    I'am facing some nasty DHCP problems and i know how to resolve it.

    Right after we upgraded from R77.30 to R80.10 (Both Mgmt servers and Gateways), the DHCP was not working anymore.

    The...
Results 1 to 11 of 11