CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Search:

Type: Posts; User: weichunxia

Search: Search took 0.00 seconds.

  1. Replies
    5
    Views
    1,873

    iphone secure remote client download

    Hi , everyone,

    Did anyone ever download iphone secure remote vpn client ? checkpoint.com say it provides free download , but donot provide link . very appreciated if anyone can provide download...
  2. icmp packet does not go through vpn tunnel

    Hi , I have one strange issue need your help .
    I use checkpoint R65 version, in general property open all icmp first implied rule . I have one site-to-site vpn , and put this site-to-site vpn rule...
  3. Replies
    4
    Views
    1,823

    UTM 1070 cannot get commited bandwidth

    Hi Friends, Recently we upgrade one 4M internet link to 10Mbps,one UTM1070 is located behine this internet link. I have tested the link speed in front of firewall, it can reach 10Mbps, but testing...
  4. Can R65 HFA30 upgrade to R65 HFA60 directly?

    Hi Friend,

    Can secureplatorm R65 HFA30 upgrade to R65 HFA60 directly without installing HFA40&50? Can anyone share the experience if HFA60 is running stably? I ever experienced HFA40 bug cause...
  5. Replies
    1
    Views
    1,363

    UTM memory utilization remain high

    UTM memory utilization remain high, if I reboot , memory will remain around 500MB at first 2 days, then it will reach 900+ MB neverthless heavy or low traffic . The UTM modal is 1070, physical memory...
  6. Replies
    2
    Views
    2,378

    Re: urgent! smartcenter CA is not running

    Thanks for your response.
    For this issue I have reported to checkpoint, they tell me it is because of HFA40 . Many users with this patch report this issue to them. So the final solution is to...
  7. Replies
    2
    Views
    2,378

    urgent! smartcenter CA is not running

    I have one UTM1070 , always occur "smartcenter CA is not running " issue . The log in fwd.elg display that :
    fwauthd: cpFileExist /opt/CPsuite-R65/fw1/bin/xrm failed
    FireWall-1 daemon going to die...
  8. Re: How long we need wait for formal ccsa/ccse certification paper

    I have sent email to certification@checkpoint.com one month ago, but still didnot receive . Do I need call them ? Or how can I check the delivery status if they have sent it out?
  9. Does checkpoint support trendmicro viruswall 6.5

    Hi , Anyone know if checkpoint support viruswall 6.5 integration using CVP to filter email ?
    From CVP configuration page, only 3.5 version is available when we choose...
  10. Replies
    1
    Views
    1,462

    Urgent problem about CVP using

    I use CVP trendmicro viruswall working with checkpoint to filter incoming virus email . My question is : if the connectivity between firewall and viruswall has problem,would checkpoint spool incoming...
  11. How long we need wait for formal ccsa/ccse certification paper

    I have passed ccsa Dec last year, but donot receive the certification paper yet . What else action do I need take to let them send it out ?
  12. Replies
    2
    Views
    2,229

    Re: pass ccse R65

    Great. Maybe we could talk about cissp after you take CCSE test. :-)
  13. Replies
    2
    Views
    2,229

    pass ccse R65

    Today cleared CCSE at 82% score . Test mostly focused on vpn, upgrade, HA, cluster . You need read document carefully. Boson or pass4sure is useless totally .
    From now, I will prepare CISSP :-)
  14. Replies
    10
    Views
    10,740

    Re: FW VPN Certificate about to expire

    I have renewed vpn certificate by removing default-cert from vpn certificate list, it will generate new automatically.
    Thanks for all guy's kindly response .
  15. Replies
    10
    Views
    10,740

    Re: FW VPN Certificate about to expire

    The VPN function removal will remove vpn certificate , we have remote access community and site-site community, does this certificate renew method affect remote access client ? I want to know if it...
  16. Replies
    10
    Views
    10,740

    Re: FW VPN Certificate about to expire

    I ever tried renew on R65 testing machine, it works fine . no need to resetup vpn site on client machine . But never tried on production firewall .

    I face same question on R55 windows...
  17. Replies
    1
    Views
    2,174

    UTM TS1 license

    Hi , This is my first time to purchase checkpoint device. I have registered to get UTM license like this "
    CPMP-UAPP-1-NGX CPXP-SXA-2-NGX CPMP-EVRX-1-NGX CPMP-EVRX-1-NGX ", I want to confirm if this...
  18. Replies
    7
    Views
    3,734

    Re: remote desktop to a secure client

    I also encounter such problem," enable back connection " doesnot work for this issue .
    Do you have resolved this issue?
  19. Replies
    5
    Views
    2,800

    Re: non split tunnel vpn

    should I tick the option in global properties--vpn advanced--office mode(use first allocated office mode ip address for all connection ...)?
    Currently LAN host could not access secureclient and...
  20. Replies
    5
    Views
    2,800

    Re: non split tunnel vpn

    Thanks for your response first.
    But I ticked the hub mode in GW-VPN advanced, still cannot get gateway ip address .
  21. Replies
    5
    Views
    2,800

    non split tunnel vpn

    for CP office mode vpn, I could find ip pool and dns/wins setting, but donot find where to set gateway to make client all traffic go through vpn tunnel .

    other vpn gateway like asa, when client...
  22. Replies
    7
    Views
    6,919

    Re: CP+RSA authentication problem

    This issue has been resolved. It is because ACE server open windows firewall. Although ace service is in exception, but it only works when close windows firewall . I donot know which additional port...
  23. Replies
    1
    Views
    3,782

    how to enable UTM telnet/ssh service?

    Do anyone know how to enable telnet or ssh service on UTM so that we could access its command line ?
    No description for this part in document and it seems not enabled by default .
  24. Replies
    7
    Views
    6,919

    Re: CP+RSA authentication problem

    I have followed the step on pdf file . But the result is same .
    When I change vpn user to preshared password auth, vpn could setup ok, change to securid , failed.
    Is there any method to find...
  25. Replies
    7
    Views
    6,919

    Re: CP+RSA authentication problem

    /var/ace/sdstatus.12 is generated, no secureid file generated . I also delete all other users and create one user to test , the result is same .
    no log on ace, fw log : reject reason (secureclient...
  26. Replies
    7
    Views
    6,919

    CP+RSA authentication problem

    I am testing Checkpoint + RSA integration. I use RSA to authenticate VPN user . I have installed ace server in CP DMZ area, add agent host(no tick node secret option) and generate sdconf.rec file and...
  27. Replies
    2
    Views
    1,370

    update expire date on UTM device

    Hi , I have searched one topic about update expire date , it use " fwm expdate", but on UTM platform, no expdate option after "fwm", and in expert mode, I donot find fwm command, anyone know how to...
  28. Replies
    4
    Views
    1,534

    Re: restore R55 backup file to UTM R62

    I thought restore is same as upgrade_import , so it failed . Now I have import successfully using upgrade_import tools.
    I use R55 self upgrade_export and R62 upgrade_import, it works .
    But if I...
  29. Replies
    4
    Views
    1,534

    restore R55 backup file to UTM R62

    currently I have R55 installed on windows platform, I use upgrade_export get R55 backup tgz file . When I restore it to UTM1050(R62), get such error :compress type uncompatible .
    Is there other way...
Results 1 to 29 of 29