CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Search:

Type: Posts; User: peter42

Search: Search took 0.01 seconds.

  1. Thread: CP1500

    by peter42
    Replies
    6
    Views
    612

    Re: CP1500

    That will probably not happen as long as it is ARM and not X86.
  2. Thread: CP1500

    by peter42
    Replies
    6
    Views
    612

    Re: CP1500

    But even the 1400s won't get the new R80.20 release!
  3. Thread: CP1500

    by peter42
    Replies
    6
    Views
    612

    Re: CP1500

    Found this: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk157412
  4. Thread: CP1500

    by peter42
    Replies
    6
    Views
    612

    CP1500

    On the CP webpage and in some SKs I found references about a CP 1500 SMB device, does anybody have more information about it?
  5. Replies
    53
    Views
    102,040

    Sticky: Re: Check Point 1100 Appliance - FAQ

    The newest R77.20 build (.81) is no longer supported on the 600/1100 series and SK137212 clearly states:

    "Important: this and future releases do not support 600/1100 appliances.
    The supported...
  6. Thread: vSec for NSX

    by peter42
    Replies
    1
    Views
    1,848

    Re: vSec for NSX

    Can you tell me which edition of NSX you used - I guess you need the advanced edition at least?
  7. Replies
    3
    Views
    1,130

    Re: safe@office 225 revival

    The lastest FW is 8.2.64, to be found here:...
  8. Replies
    18
    Views
    3,072

    Re: R80.20.M1 Management Release

    I fully agree - especially as the maintainer does not accept error reports, if they do not fit in his mindset...
  9. Replies
    18
    Views
    3,072

    Re: R80.20.M1 Management Release

    The original idea of sytemd from svc from Solaris is great, the implementation is in Linux is a shame.
  10. Support for embedded R77.20 extended by a year

    I just noticed on the CP hompage, that EOS for embedded R77.20 has been pushed from 05/19 to 05/20.
  11. Thread: PoE and VDSL

    by peter42
    Replies
    3
    Views
    1,326

    Re: PoE and VDSL

    Yes it is in EA now.
  12. Thread: PoE and VDSL

    by peter42
    Replies
    3
    Views
    1,326

    Re: PoE and VDSL

    Rumors are, that VDSL is in EA now.
  13. Replies
    7
    Views
    2,292

    Re: cphastart error

    In R80.10 you have to use GUIDBEdit to set the magic, if you don't want/cannot use the auto mode.

    See...
  14. Replies
    7
    Views
    2,292

    Re: cphastart error

    I guess, that if you have several cluster, which see each other, it is still better to set the magic byte - now done by GuiDBEdit.
  15. Replies
    9
    Views
    2,286

    Re: new build of R77.20.60?

    R77.20.70 is out!

    Found it strange to have new builds only mentioned in the small print, instead of releasing a .61 and .62.
  16. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    Yes it is fixed on the 1400 - I just tested it, the answer only comes, when the request is sent from the same VLAN.
  17. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    I will have to test it, from the dhcpd version it should be fixed so.

    The 1100 did not show that bug directly as it has a different kernel.
  18. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    :) I understood from your post, that you are with CP - no worries.
  19. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    Could you trigger the update please?
  20. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    In R77.20.60 for the 14x0 the new DHCPD is included (4.3.5), for the 11x0 it is still the old one.
  21. Replies
    4
    Views
    1,770

    Re: CP3200 affected by Atom Bug

    CP3200:
    processor : 0
    vendor_id : GenuineIntel
    cpu family : 6
    model : 77
    model name : Intel(R) Atom(TM) CPU C2558 @ 2.40GHz
    stepping : 8
    cpu...
  22. Replies
    4
    Views
    1,770

    CP3200 affected by Atom Bug

    Just received the info, that our 3200 have to get exchanged. Obviously due to the Atom bug from Intel.
  23. Thread: PoE and VDSL

    by peter42
    Replies
    3
    Views
    1,326

    Re: PoE and VDSL

    Just saw, that PoE ist now available on the 1470 and 1490 (but not on the 1430/1450) for an extra $300.

    Still no sign of VDSL.
  24. Thread: PoE and VDSL

    by peter42
    Replies
    3
    Views
    1,326

    PoE and VDSL

    Checkpoint told us, that there will be Small Appliances with PoE and VDSL, is there any timeframe for it?
  25. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    Thanks and lets hope it will be fairly quick.
  26. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    When will this happen and did our case trigger it?
  27. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    We tried that as well.
  28. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    Yes, they recommend to do an RFE...
  29. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    Sure, I just did it to prove the error. Not to use the binary in production (it is a POC installation anyhow).
  30. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    Yes thats what I did - crosscompiled the new DHCPD, put it on the 14xx and voila it worked.

    The bug is fixed in 4.3.2:

    ": ftp://ftp.isc.org/isc/dhcp/4.3.2/dhcp-4.3.2-RELNOTES

    "
    - Modified...
  31. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    No it is not a configuration issue. The supporter just did not get the main issue.

    In the configuration (which works on the 1100 with an older Linux kernel), that we want to use there is no VLAN...
  32. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    OK I will - thank you.
  33. Replies
    29
    Views
    4,764

    Re: DHCPD incorrectly handles tagged packages

    Yes 4.0.0b3 is used in Embedded Gaia.

    I forwarded youthe SR#.

    Here is the correct behaviour with an updated DHCPD:

    /tmp/dhcpd -d -cf /etc/dhcpd.conf.LAN15 -lf /var/dhcpd.leases.LAN15 -pf...
  34. Replies
    29
    Views
    4,764

    DHCPD incorrectly handles tagged packages

    On the 14xx there exists a problem with VLAN-handling and DHCP.

    If you have an interface which gets VLAN-tagged traffic, the DHCP-server for the untagged interface answers the request.

    It is...
  35. Replies
    8
    Views
    2,698

    Re: support for R80 on older appliances

    The R80.10EA release notes clearly state, taht IP appliances are not supported.
  36. Replies
    13
    Views
    8,821

    Re: Nokia IP290 and IP390 upgrade to R77 advice?

    No from MR4.
  37. Replies
    13
    Views
    8,821

    Re: Nokia IP290 and IP390 upgrade to R77 advice?

    We have a couple of 290s runnig at IPSO 6.2MR5 with R77.30, it works fine, only installation with QoS takes about 5 minutes.
  38. Replies
    4
    Views
    4,809

    Re: Gaia LAN dhcp server

    Yes, but not via clish, but in the config file in normal ISC syntax.
  39. Replies
    7
    Views
    2,122

    Re: IP290 Essential support gone?

    Finally they found it.
  40. Replies
    7
    Views
    2,122

    Re: IP290 Essential support gone?

    CP support is about twice as expensive.
  41. Replies
    7
    Views
    2,122

    Re: IP290 Essential support gone?

    Works fine with R77.30 and 2GB (with IPSO).
  42. Replies
    7
    Views
    2,122

    Re: IP290 Essential support gone?

    We have an old one with Nokia SKU, and with yearly renewal we always got the Essential support.

    According to a paper I found, th xx0 should still a under Essential support, unlike the xx5, which...
  43. Replies
    7
    Views
    2,122

    IP290 Essential support gone?

    Is the essential support for the IP290 still avilable and if not, which support levels are?
  44. Replies
    27
    Views
    7,493

    Re: 1100 GAIA R77.20 Embeded

    I sent you our SR #.
  45. Replies
    27
    Views
    7,493

    Re: 1100 GAIA R77.20 Embeded

    It is out now: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105379
  46. Replies
    0
    Views
    1,349

    can time object warnings be suppressed

    When you have a rule which is expired in your ruleset, you will receive a warning during installation. Is there a way to suppress these warnings?
  47. Thread: SG80 and R76

    by peter42
    Replies
    2
    Views
    1,227

    Re: SG80 and R76

    At the moment the installation on the 1100 crashes on R76 for us.
  48. Re: CP announced EOL for IP appliances for 3.6.2018

    Will CP offer a special trade in for these?
  49. CP announced EOL for IP appliances for 3.6.2018

    per today e.g.:
    IP690 Successor Product Available May, 2007 IP650 3-Jun-2013 3-Jun-2016 3-Jun-2018 R76, 6.2; R70, R71, R75 & current HFAs
  50. Re: After upgrade to R76 file ownership is only shown numeric

    We received a HF now.
  51. Re: After upgrade to R76 file ownership is only shown numeric

    OK - thanks for the reference.
  52. Re: After upgrade to R76 file ownership is only shown numeric

    The feeling and fear, that if QA is so bad, that other fundamental bugs are overseen as well.

    This is a bug in a fundamental syscall.
  53. Re: After upgrade to R76 file ownership is only shown numeric

    This bug did not appear under any other Splat version we used so far.

    A not working basic syscall is a major issue, case is open.
  54. Thread: SSH - SCP

    by peter42
    Replies
    12
    Views
    7,204

    Re: SSH - SCP

    pscp does not work either.

    Fix is in R75.46 or you can work around it by:
    Switching WinSCP to SCP and uncheck the optimize buffer option.
  55. Replies
    7
    Views
    6,598

    Re: SPLAT SCP problem

    It is fixed in R75.46.

    One work around is to switch WinSCP to SCP and uncheck the optimize buffer option.
  56. Re: After upgrade to R76 file ownership is only shown numeric

    The same happens with a fresh R76 Splat installation.
  57. Splat R76 shows file ownership only in numeric form

    We upgraded from R75.45 to R76 (Splat to Splat), everything seems to work, but file ownership and group information is not resolved any more, but shown in numeric form.

    ls -asl
    total 24
    4...
  58. Replies
    16
    Views
    6,809

    Re: Check Point R76

    For those who haven't noticed already, CP removed the last Solaris support with R76.
Results 1 to 58 of 58