CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Search:

Type: Posts; User: fireverse

Search: Search took 0.01 seconds.

  1. Replies
    4
    Views
    1,810

    Re: Check Point R77.20.50 for SMB Appliances

    Sandblast on 700s, 1400s, 1200Rs. Should be interesting.
  2. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    Updated with more detail on options for upgrading to R77.10.


    http://fireverse.org/wp-content/uploads/2014/06/Upgrade-Universalv2-border-300x234.jpg
    2014 Upgrade Options PDF Link
  3. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    2014 update for R75, R76 and R77.

    With R70 and R71 end of support, the diagram has somewhat simplified...for now.
    ...
  4. Replies
    0
    Views
    13,069

    ABRA - GO End of Sale December 31, 2013

    Effective December 31, 2013: End of Sale - Check Point GO (Abra)

    Effective December 31, 2013, Check Point GO device will no longer be available for sale. The final software version is R75 HFA 5,...
  5. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    New Update as of 4/9/13. There have been some more releases since I last updated these diagrams, as well as some corrections in the official Release Notes (as has been noted on CPUG). The new...
  6. Replies
    3
    Views
    1,189

    Re: R75.40 mds_restore is broken

    So you and I are the only ones in the world that have tested this so far? ;) FYI I put on R75.45 (SPlat) afterwards and mds_restore seems to be good, so it was only the R75.40 version that was...
  7. Replies
    3
    Views
    1,189

    R75.40 mds_restore is broken

    FYI I ran into a pretty serious bug last week while trying to perform an mds_restore within an R75.40 environment. The mds_restore script is empty/corrupted in the R75.40 build. If you search the KB...
  8. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    Version 4 includes the latest includes R75.45 and R75.40VS (for now).

    http://fireverse.org/wp-content/uploads/2012/10/Upgrade-to-R75v41-300x224.jpg
    R75 Upgrade Options .pdf

    ...
  9. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    The matrix on the second page shows how to get directly from one version to another, but what if you have versions in between (R70 to R75.40, or R70.30 to R75.40 scenarios for example)? I feel that...
  10. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    If people like the Check Point version, then that is fine. This is a different way of displaying the information. The "official" document shows you can upgrade from R70.50 to R71.50. I don't see that...
  11. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    Well I am back and working on Check Point product again, although now as an independent consultant in the US. It has been over a year since I updated the "Upgrade Diagrams." I am working with a very...
  12. Replies
    7
    Views
    3,971

    Re: CCMA R71 prerequisites changed

    At the time of this posting, there is no CCMSE R71 material or exam. Pearson/VUE still only offers the CCMSE for R70.
  13. Replies
    30
    Views
    11,436

    Re: Check Point R70 R71 R75 Visual Road Map

    R75.10 was release just a few hours ago. The following diagram has been updated for R75.10:

    http://fireverse.org/wp-content/uploads/2011/05/FireverseTimeline2011i-212x300.gif

    R7x Visual Roadmap...
  14. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    The latest...

    http://fireverse.org/wp-content/uploads/2011/04/Upgrade-to-R70-1-300x231.gif

    Upgrade to R70 .pdf

    http://fireverse.org/wp-content/uploads/2011/04/Upgrade-to-R71-1-300x234.gif
    ...
  15. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    Great feedback. I will make the change. Thanks.
  16. Replies
    30
    Views
    11,436

    Re: Check Point R70 R71 R75 Visual Road Map

    You should expect to see R75.10 become GA in April. There will be some pretty interesting enhancements...

    *Sign up for the Public GA in your User Center if you want to take a look...
  17. Replies
    21
    Views
    16,951

    Re: R70 R71 R75 Upgrade Path Diagrams

    If you follow the R70.x diagram above, the path is:

    R70.40 to R71.20 (using sk59481, or click on the text in the diagram to go directly to the SK article)
    From R71.20 (includes fixes from R70.40)...
  18. Replies
    21
    Views
    16,951

    R70 R71 R75 Upgrade Path Diagrams

    I created three diagrams to show from a visual perspective the migration path into R70, R71, or R75. These diagrams show the path from versions as early as R60. I gathered this information from the...
  19. Replies
    30
    Views
    11,436

    Re: Check Point R70 R71 R75 Visual Road Map

    I made some major additions to the document. I published it in .pdf format which allows for including links to the official Check Point documentation for things like "Known Limitations", "Resolved...
  20. Replies
    30
    Views
    11,436

    Re: Check Point R70 R71 R75 Visual Road Map

    Thanks for the notes of support. I am an SE at Check Point and was able to get in contact with the group that produced the "official" version. I can see why they would want their own version of the...
  21. Replies
    30
    Views
    11,436

    Re: Check Point R70 R71 R75 Visual Road Map

    Hmmm, so Check Point takes my content and layout, flips it sideways, and now it's "official?" I know which version I'll be using with my customers ;)
  22. Replies
    30
    Views
    11,436

    Check Point R70 R71 R75 Visual Road Map

    I put together a one page diagram in hopes that it will make choosing an R7x version a little easier. This should save you the hassle of having to read through all the release notes of ten different...
  23. Re: R71 Security Gateway Virtual Edition Available

    Licensing is based on the amount of cores.

    8 cores $2,000 List
    16 cores $3,000 List
    48 cores $6,000 List
  24. R71 Security Gateway Virtual Edition Available

    Check Point released the new R71 Security Gateway Virtual Edition on Oct 3rd, 2010. There was a press release a few weeks ago, and now the code is finally available for download. This new release...
  25. Replies
    4
    Views
    3,250

    Re: SSL Network Extender on Security Gateway?

    In the rule you create to support SNX connections, only include the Group object of the users that you want to allow to connect.
  26. Replies
    3
    Views
    1,454

    Re: View eventia report via recieved mail

    Then make sure you open/view the report in IE as Firefox does not support MHT anymore.
  27. Replies
    2
    Views
    1,879

    Re: Eventia Suite R70 installation

    Are you using the R70.20 SmartDashboard with an R70 SmartCenter by chance? I ran into an issue a few weeks ago when setting up Eventia. I went back and launched the R70 Dashboard instead, and the...
  28. Thread: Project Gaia

    by fireverse
    Replies
    82
    Views
    26,906

    Re: Project Gaia

    VMWare has been supported for awhile. For the latest info on what Check Point products run in VMWare look here:

    Products supported on VMware ESX
  29. Replies
    20
    Views
    4,885

    Re: R72 WARNING - memory Leakage

    Contact Support and ask them about:

    R72_Patch75_225_and_237.exe

    This patch might address some of the issues you have posted here.
  30. Replies
    1
    Views
    1,688

    R65 HFA60 is Public EA

    Not quite GA, but now available outside of the EA program. There will also be a patch for Provider-1. I have the release notes posted here if you want to take a look:

    R65 HFA 60 Release Notes
  31. Replies
    7
    Views
    4,748

    Re: How to export Security rules to excell

    Odumper is still probably the easiest and best documented tool to use.
  32. Re: migration from Provider-1 to SmartCenter environment assistance

    I worked with a customer a few months that needed to move from P1 to a SmartCenter. The reason for this was they were with an MSP using P1, and then decided to take their firewall management back...
  33. Replies
    8
    Views
    1,940

    Re: HFA50? - Released or not?

    HFA50 Release Notes which list the fixed issues:

    fireverse.org » Blog Archive » R65 HFA50 EA Open to the Public
  34. Replies
    7
    Views
    2,699

    Re: Provider-1 New Project

    Okay if you only want SmartDefense for R65 VPN-1 then follow this link:

    Check Point Software: Defense Updates NGX R62/R65

    I count 50 updates for R65 VPN-1 so far for 2009. Seems like it's still...
  35. Replies
    7
    Views
    2,699

    re: Provider-1 New Project

    Entirely untrue. SmartDefense updates released (with support for R65) on June 17th 2009:

    Update Protection against Microsoft Active Directory Memory Leak Denial of Service Vulnerability (MS09-018)...
  36. Re: migration from Provider-1 to SmartCenter environment assistance

    Open a ticket with support and ask them send you the info in:

    11-19943241
  37. Replies
    22
    Views
    5,365

    Re: What's the word on HFA_50 for R65?

    HFA50 officially supports the 2.4 and 2.6 kernels and is a public EA program. This is pretty big news for anyone on 2.6, and you might consider getting in the EA program. More info and the release...
  38. Replies
    8
    Views
    4,990

    Re: Dual Layer Firewall with Checkpoint

    So which version should he run:

    7.x EAL4 version with 45 vulnerabilities discovered so far
    Cisco PIX 7.x - Advisories by Product - Secunia Advisories - Vulnerability Information - Secunia.com
    ...
  39. Replies
    13
    Views
    8,198

    Re: Announcing Confwiz

    This will not import PIX 7.x or 8.x configurations. Right now it is limited to PIX 6.3 (seen one of those lately?) and FWSM 2.3. I would look at this as more of an Ofiller/Odumper offering by Check...
  40. Replies
    5
    Views
    3,061

    Re: Hi all new to VSX help!!!

    Petroman did a great job explaining this. In your case if the external interface of the VSs are all in the same subnet, then you would use a virtual switch (as he said). This is a very common...
  41. Replies
    29
    Views
    5,564

    Re: Question: R70 P1 and R65 VSX upgrades

    You might consider waiting on the R70 side, as R70.1 will be out around the end of Q2. You should see a P1 R70.1 patch around that time as well. FYI EA for the next release of VSX will start in Q3...
  42. Replies
    10
    Views
    3,688

    Re: Eventia Suite installation

    You will need to create a Global Object for Reporter and Analyzer. This is done through the Global Policy SmartDashboard in the MDG. Once you have established SIC between the Eventia Global Objects...
  43. Replies
    18
    Views
    4,811

    Re: Checkpoint R65 2.6 Kernel

    FYI it looks things have changed and there will indeed be a 2.6 HFA. I have a customer working on several 2.6 issues, and they were told that HFA50 will be posted late Q2 and will include an HFA for...
  44. Replies
    2
    Views
    1,481

    Re: Link aggregation in R70

    Link aggregation will appear again in the R70.1 update. The EA program for R70.1 is about to start so if you are interested in working with it, get a hold of your local Check Point team and have them...
  45. Replies
    12
    Views
    6,106

    Re: VSX and VSX CMA licensing

    You can choose to manage as many VSs out of a single VSX-CMA as you want so long as the total VSX-CMA license count matches up with the VSX license count.

    I think a few examples will help:

    If...
  46. Replies
    18
    Views
    4,811

    Re: Checkpoint R65 2.6 Kernel

    Not sure what you mean by this. I have an enterprise customer I work with running over a hundred UTM appliances without any significant issues. UTM has been a solid product for my customers. They may...
  47. Replies
    18
    Views
    4,811

    Re: Checkpoint R65 2.6 Kernel

    Official word is that there will not be any HFAs produced for R65 2.6. That being said I have worked with several customers that needed Hot Fixes (not HFAs) created. Check Point R+D did in fact...
  48. Replies
    12
    Views
    6,106

    Re: VSX and VSX CMA licensing

    VSX-CMAs are specific licenses for managing VSs (virtual systems). VSX-CMAs cannot be used for managing discreet firewalls or Edge devices. That being said, there are several key benefits that come...
  49. Replies
    5
    Views
    1,933

    Re: smartdashboard crash

    Are you running SmartConsole R65 HFA01?
  50. Replies
    20
    Views
    9,116

    Re: Secureplatform performance !!!!!!

    Same Crossbeam OEM, and Crossbeam is handling the RMAs. Guess I should have been more clear with this statement. The key words here are "based on." I probably should have written:

    "The UTMs (450,...
  51. Replies
    20
    Views
    9,116

    Re: Secureplatform performance !!!!!!

    Not knowing the exact configuration from the BIOS, to the switches, to the OS and Check Point application itself, I guess it would be hard to say what the exact problem is you are experiencing. I...
  52. Replies
    20
    Views
    9,116

    Re: Secureplatform performance !!!!!!

    I have a very very large customer (one of the largest privately held companies in the world) running P1 on 2.6 and their gateways on 2.6 for four months, with no serious issues. The only issue they...
  53. Replies
    6
    Views
    2,179

    Re: Searching for CoreXL documentation

    Make sure you read the CoreXL release notes very carefully. There is a detailed list of features that are not supported once CoreXL is enabled.

    $.02
  54. Replies
    19
    Views
    8,533

    Re: SmartCenter on VMWare

    Link to Check Point VMWare document:

    From the document:

    VPN-1 NGX R65 for VMware supports the following VMware ESX Server versions:
    • VMware ESX Server versions 3.0.2, 3.5 or 3i
    •...
  55. Replies
    3
    Views
    4,139

    Re: ¿Provider-1 R62 or R65?

    Depends on the version VSX you need to support. If you are looking at VSX R65 (Ecuador) then you will need P1 to be at R65 in order to use the VSX R65 plug-in.

    Otherwise version R62 will support...
  56. Replies
    18
    Views
    7,119

    Re: Do you use Eventia?

    First of all Eventia R65 is a lot easier to setup for Smart Center and P1. There is also a lot more functionality and a greatly expanded library for 3rd party devices. You will find support for...
  57. Replies
    0
    Views
    1,460

    New Eventia Compliance Reports for R65

    For those of you who haven't heard, there are 19 new reports that were released a few weeks ago for Eventia Reporter R65. These reports are specifically geared toward audit, regulations and...
  58. Re: Can eventia reporter can filter unused objects?

    Eventia Reporter R65 will not report on unused objects at this time. However it is an upcoming feature which you will probably see this summer.

    In the meantime for object cleanup you can use...
  59. Thread: FW1 Stencils

    by fireverse
    Replies
    4
    Views
    16,569

    Re: FW1 Stencils

    You can find them here:

    fireverse.org » Official Unofficial Check Point Visio Stencil
Results 1 to 59 of 59