CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Search:

Type: Posts; User: fluke

Search: Search took 0.00 seconds.

  1. Replies
    2
    Views
    4,196

    Re: Eventia Installation

    The Smartcenter and the SmartEvent server should be the same version (R75.40 in your case) - then perform "Install Database" on both the SmartCenter and SmartEvent servers.
  2. Thread: IA And SK43874

    by fluke
    Replies
    8
    Views
    2,976

    Re: IA And SK43874

    I have done it manually according to SK43874. Are you able to connect using WMI - check again WMI/DCOM permissions and proper firewall ports being open. Check the value of...
  3. Replies
    1
    Views
    3,937

    Re: Mcafee EPO parsing log files into SmartEvent

    I have not done EPO, but I have successfully created my own definitions for other products.
    Is the product name correctly recognized in the Tracker or it still says "Syslog"? Make sure you have...
  4. Replies
    2
    Views
    2,570

    Re: WMI Monitoring through SPLAT

    Check if even after allowing ALL_DCE_RPC you have dropped traffic on high ports between the hosts, that need to communicate. What is the version of the FW and the Windows servers you are monitoring?
  5. Replies
    5
    Views
    2,062

    Re: Rule to secure Active Directory traffic

    RPC is basically an interface, used by services to comunicate in a server/client architecture. Each service has a unique RPC identifier (UUID). DCE-RPC object defines which services are allowed to...
  6. Thread: Cert based auth

    by fluke
    Replies
    3
    Views
    1,869

    Re: Cert based auth

    On the LDAP account unit you can configure a default authentication scheme for the ldap users, you can also create user templates and assign authentication scheme there.
  7. Thread: Cert based auth

    by fluke
    Replies
    3
    Views
    1,869

    Re: Cert based auth

    Set the authentication scheme to 'Undefined' for the users, that need to use cert auth.
  8. Replies
    2
    Views
    4,643

    Re: R75 URL Filtering Reports

    The express reports take the info from Smartview Monitor, while the Standard reports take the info from the logs (Smartview Tracker).
  9. Re: Web Activity under Firewall Blade-Activity does not display visited web sites

    In the URL filtering policy, you need to configure tracking->track allowed requests. Be careful, it will generate a lot of logs.
    In SmartReporter - change Consolidation->Settings->Save Full URL in...
  10. Replies
    17
    Views
    5,093

    Re: StormAgentMsg: Failed to access URL

    I downloaded the relevant intermediate certificate from here https://www.startssl.com/certs/sub.class2.code.ca.crt and copied it to $FWDIR/conf as equifax.cer. Unfortunately it still doesn't work. I...
  11. Replies
    5
    Views
    2,245

    Re: Fiasco with R75.10 SmartEvent

    Hi,

    Did you manage to find a solution to this? I have the same problem after upgrading SmartEvent from R71.30 to R71.40.

    Thanks
  12. SmartReporter - create custom reports from 3rd party logs

    Hi,

    I am parsing syslog logs from 3rd party devices with Eventia. Is it somehow possible to create custom reports from these logs? In SmartReporter (R71.30) I only see possibilities to modify...
  13. Replies
    1
    Views
    1,615

    Create custom queries visible to all users

    I would like to create custom queries in Smartview Tracker, which should be visible to all users of the Tracker. Anyone has an idea how to achieve this?

    Version R71.30/Smart-1 appliance

    Thanks...
Results 1 to 13 of 13