CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Search:

Type: Posts; User: sk0yern

Search: Search took 0.00 seconds.

  1. Re: cpview to find out the source and destination that uses the most BW

    This will crawl the connection table count all sources and destinations, and display the IP's with most entries in that table. No matter if they are idle, or transfering at 10GBit/s.
  2. Replies
    17
    Views
    1,823

    Re: FTP issue in R77.30 with JHFA 216

    How about trying to get a tcpdump of a successful session, and compare that one with a session that fails?
    There must be something there that's different?
  3. Replies
    17
    Views
    3,258

    Re: R80.10 release on the way?

    Check Point have been talking about R80 for a loooong time now, and there is obviously a reason why it has been delayed.
    No way I'm gonna run this in production in 2017.
  4. Replies
    2
    Views
    2,252

    CPU recommendation

    Hi,
    I'm looking at replacing an old HP DL380G7 with a DL380G9.
    I currently have a 4 CPU license. As it's quite expensive to upgrade the license, I would prefer to keep it, and just purchase the...
  5. Replies
    1
    Views
    3,077

    Support for Cloud computing services

    Hi,
    Does anyone know if there are any plans to add Cloud computing services (Azure, Aws..) as a Country/location in Geo Protection?
  6. Re: Firewalls not sending Logs to Management Server after disk went full

    What I do is change log server under Gateway Cluster properties, install policy.
    Then vice versa.
  7. Replies
    2
    Views
    1,908

    CheckPoint boot process

    So here I am again, booting a log server which seems to be stuck at fsck.
    Can anyone give me any sane reason why you by default get no usable output at all while booting?
    I seriously despise that...
  8. Replies
    27
    Views
    12,520

    Re: HP Gen 9 Server Support for Gaia

    I just got notified by checkpoint that "HP Gen9 failed certification. It's unclear if or when HP Gen9 will be supported".
    This is kind of major news, we're a HP-shop and run a lot of open servers.
  9. Replies
    8
    Views
    2,336

    Re: Rule base optimiization

    If you use smartlog, you can look at "Top firewall rules" there as well. If you manage several firewalls, search for "origin:name_of_firewall" so you get only rules for that firewall.
  10. Replies
    31
    Views
    11,974

    Re: Appliance vs open server?

    The main reason for buying open servers for us, are the hardware costs.
    One of Check Points arguments last time, was that the support costs on appliances is only 10%, compared to 16% on open...
  11. Replies
    2
    Views
    2,460

    Syslog on VSX, wrong source address

    Hi,
    I'm running a R77.20 VSX cluster.
    Syslog is working fine, but the source-address on all syslog-messages is the vsx-cluster-address.
    So I can't actually see which node that sent a specific...
  12. Replies
    4
    Views
    5,484

    Re: R77.10 Hit Counters no longer work

    I'm running MDS R77.20 Gaia, and hit counters works just fine here.
    Confirmed with both SPLAT 75.40 gateway, and Gaia 77.20 running VSX.

    We didn't notice sk98017 before the upgrade, but it worked...
  13. Replies
    0
    Views
    2,635

    Checkpoint monitoring with Splunk

    Hi,
    We recently upgraded our vsx-cluster to R77.20, and I'm looking into monitoring.
    I'm looking into snmp, but there is some data I miss.
    I would love to get the "Traffic counters" you get in...
Results 1 to 13 of 13