CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Search:

Type: Posts; User: Raj909

Search: Search took 0.00 seconds.

  1. Replies
    28
    Views
    19,938

    Re: How to handle Office365 IP addresses

    I'm trying to understand how to run the script using Powershell. Does anyone have any clearer instructions on how to execute so it downloads the XML and automatically creates the network objects?
    ...
  2. Replies
    6
    Views
    4,357

    Re: IPsec VPN with Palo Alto Firewall

    Hey Zimmie,

    I switched to "One VPN tunnel per Gateway pair" and everything is good. No need to mess with the user.def file. This is for a lab environment and evaluation of VPN tunnels so the...
  3. Replies
    6
    Views
    4,357

    Re: IPsec VPN with Palo Alto Firewall

    Bob, I am using IKEv1 and ran an IKE debug. It appears that P2 is failing.

    Shadowpeak, I currently have 0.0.0.0/0 for the local and remote side on the PAN firewall. I have tried with also the...
  4. Replies
    6
    Views
    4,357

    IPsec VPN with Palo Alto Firewall

    Has anyone created a site-to-site VPN tunnel with a Palo Alto Firewall (PAN)? I have the tunnel up and able to ping from the PAN to network behind Checkpoint, but not vice versa. Key Install...
  5. Replies
    14
    Views
    3,762

    Re: CoreXL for 4 core system

    Varera, here you go:

    [Expert@fw:1]# fwaccel stats -s
    Accelerated conns/Total conns : 332/11550 (2%)
    Delayed conns/(Accelerated conns + PXL conns) : 169/6029 (2%)
    Accelerated pkts/Total pkts :...
  6. Replies
    14
    Views
    3,762

    Re: CoreXL for 4 core system

    Not planning to disable CoreXL, wondering if a 2/2 split will be fine (2 SND, 2 FWK)

    [Expert@fw-:0]# fw ctl affinity -l
    eth1: CPU 0
    eth7: CPU 0
    Mgmt: CPU 0
    VS_0 fwk: CPU 1 2 3
    VS_1 fwk: CPU 1...
  7. Replies
    14
    Views
    3,762

    CoreXL for 4 core system

    We have several 4800 clusters running VSX, with 2 virtual systems (1 for firewall and 1 for VPN). Since it is a 4 core box, Id like to ask what the optimum setup is.

    They are running R77.30 and...
  8. Replies
    3
    Views
    2,021

    Re: Virtual System Interface not showing on NMS

    We are experiencing the same issue and looking to get our Virtual Systems interfaces monitored via Solarwinds.
  9. Replies
    8
    Views
    5,492

    Re: Periodic High latency problems on a single VS

    We have 6 VSX clusters running on 4800s and 13800 pair, R77.20 with HFA 135 and from time to time we also run into the same issue. Support doesn't have a fix yet. We failover to the standby member...
  10. Replies
    0
    Views
    4,006

    Tips on configuring QOS (Floodgate)

    Does anyone have any tips on configuring the QOS policy and Firewall interface QOS settings for prioritizing voice/video traffic (h323, sip)?

    Ideally want to have a policy which matches what we...
  11. Replies
    0
    Views
    3,203

    VOIP Protocol Handlers

    We are trying to get the SIP-TLS, H323 and SCCP protocol handlers working for Lync, Avaya and Cisco telephony, but it seems the protocol handlers are not working correctly. We want to enable QOS but...
  12. Replies
    12
    Views
    3,337

    Re: CCSA cleared with 94%

    Passed with a 78% this morning.

    Thanks
  13. Replies
    12
    Views
    3,337

    Re: CCSA cleared with 94%

    What kind of questions did you get that were not from P4S?
  14. Issues with Webdav connections reset during upload

    We are experiencing issues with users trying to use WebDAV to move 300MB files to a external SharePoint server. It get about 150MB and then an error occurs stating that the"connection has been...
  15. Replies
    8
    Views
    8,975

    Malformed Packet & UDP length error

    We are having an issue with several users using the Cisco VPN Client behind our corporate firewalls. When the user establishes a VPN session, after 5 minutes, the VPN is disconnected.

    We are...
Results 1 to 15 of 15