CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Search:

Type: Posts; User: KGolomb

Search: Search took 0.00 seconds.

  1. Re: AWS PAYG not being detected by R80 Management server

    Seems a PAYG should deny a license attach if it is mistakenly done.
    I assumed the mistaken EVAL license push may have caused the issue.
    Only way to recover is a rebuild of the instance? No magical...
  2. AWS PAYG not being detected by R80 Management server

    -AWS R80 Mangagement Server in AWS with EVAL Licesnes
    -AWS R77.30 AWS vSEC gateway built with PAYG image

    The R80 management server is requiring that the R77.30 have a valid license for policy...
  3. Replies
    9
    Views
    2,309

    Re: FW opening for Amazon AWS

    Domain Objects are so confusing...even Check Point professional services used them the wrong way on a policy conversion.
    Dynamic Objects + scheduled custom scripting on gateways is the current...
  4. Re: 2200 will not run blades as sold by Check Point

    Check Point seem to always find a way to want to sell you new devices. Instead of a simple memory chip sale (which you can easily do yourself) they want new appliances sold. I suspect to make their...
  5. Replies
    5
    Views
    4,939

    Re: Smart Provisioning - "Get Actual Settings"

    Glad you found that to be useful. It took me months of back and forth with support and I eventually discovered the solution by looking through the logs I collected for them. And then they very...
  6. Replies
    5
    Views
    4,939

    Re: Smart Provisioning - "Get Actual Settings"

    7+ months and I finally figured out a solution for this.

    The issue is the good old NATed management station.

    Smart Provisioning does not utilize the $FWDIR/conf/masters file for it's SIC...
  7. Re: Multiple Endpoint Connect errors with multiple clients

    If you have many network filter drivers installed (other endpoint security software / virtualization software) the Check Point / ZoneLabs Firewall VSDATANT driver may not be getting installed...
  8. Re: Multiple Endpoint Connect errors with multiple clients

    I too have experienced the "Enforce firewall policy failed" error on a Windows 7 64 bit install of the E75.10 client.

    After many attempts to get it working I finally installed another hard drive...
  9. Replies
    5
    Views
    4,939

    Re: Smart Provisioning - "Get Actual Settings"

    This issue is now in Check Point's hands.
    Check Points support recreated the "Get Actual Settings" issue and the case has moved on to the next level supports queue.
    Current status = "Waiting to...
  10. Replies
    5
    Views
    4,939

    Smart Provisioning - "Get Actual Settings"

    Since there isn't a SmartProvisioning forum for this topic I'll stick it here.

    I'd like to use this for recovery of remote gateways.
    Use the USB recovery feature to get initial communication...
  11. Thread: R71.30 is GA

    by KGolomb
    Replies
    36
    Views
    8,610

    Re: R71.30 is GA

    From sk57080


    The sk recommends deleting and then touching the crs.xml files.
    Since cciesec2006 files seem to already be deleted maybe a touch to recreate the missing files and then a run the...
  12. Thread: R71.30 is GA

    by KGolomb
    Replies
    36
    Views
    8,610

    Re: R71.30 is GA

    Could these errors be due to the TAC's initial work around solution to this issue mentioned earlier in the thread:



    This would have gotten rid of all the crs.xml files that the installer is now...
  13. Thread: R71.30 is GA

    by KGolomb
    Replies
    36
    Views
    8,610

    Re: R71.30 is GA

    "Upgrade All Packages" is still a no go with the new package. Deploying the Package individual seems to be ok.
    The only small issue was one gw did not reboot after the HFA was applied.
    One...
  14. Thread: R71.30 is GA

    by KGolomb
    Replies
    36
    Views
    8,610

    Re: R71.30 is GA

    At least you confirm my opinion from my initial contact with SmartUpdate.
    Such a shame that this is the case.

    Clean installs are impractical when you have devices all over the world. So I really...
  15. Thread: R71.30 is GA

    by KGolomb
    Replies
    36
    Views
    8,610

    Re: R71.30 is GA

    I just got the license for the Advanced Management /SmartUpdate feature.
    R71.30 was my first attempt at using SmartUpdate instead of the WebUI/Command Line.
    Executing "Update All" with this...
  16. Thread: R71.30 is GA

    by KGolomb
    Replies
    36
    Views
    8,610

    Re: R71.30 is GA

    CheckPpoint really should just release a fixed R71.30 package..as this workaround still does not get it working via SmartUpdate. Unless the same modification can be done to the package.

    I thought...
  17. Thread: R71.30 is GA

    by KGolomb
    Replies
    36
    Views
    8,610

    Re: R71.30 is GA

    Trying to update a gateway with the Performance Pack to R71.30 will fail via SmartUpdate.
    If trying via the command line you will get the following error.
    (It would be nice if these details came...
  18. Replies
    13
    Views
    3,039

    Re: the managecenter can't use the static address

    Initial testing seems to indicate that R71.30 fixes this issue.
  19. Replies
    13
    Views
    3,039

    Re: the managecenter can't use the static address

    Please get the package from CheckPoint or your Support provider.
    I know I wouldn't trust any package that came from a Third Party.

    As far as builds numbers...that is the one that I have that...
  20. Replies
    13
    Views
    3,039

    Re: the managecenter can't use the static address

    I had this issue on R71.20 on Windows Server also.
    After looking at every setting in the book nothing would fix it...
    The Dynamic Setting happens automatically upon your upgrade.

    There a new...
  21. Thread: Project Gaia

    by KGolomb
    Replies
    82
    Views
    27,819

    Re: Project Gaia

    As 2010 is almost over. Is there any ETA on GAIA.
    Some CheckPoint UTM features are not supported on IPSO 6.2 and GAIA looks like the only way of getting them supported on an IP Appliance.
    I saw...
  22. Re: SecureClient and 64 bit Endpoint connect's co-existence and SCV

    How hard would it really be for CheckPoint to release a 64-bit SecureClient?

    The 64-bit EndPoint Connect is no replacement for a would be 64-bit SecureClient. Secure Domain Login and multiple...
Results 1 to 22 of 22