Search:

Hi Team,

I'm running my Environment with R77.30 Gaia. My management server do not have a Monitoring blade enabled in any of the Gateways.
I'm trying to generate a similar report as attached one...

Upgrading from Gaia R77.30 to R80.10
Management server

R80.10 upgradation failed with following errors.

Upgrade package is not ready
/bin/upgrade_start: line 16: ./upgrade: No such file or directory
UPGRADE: Upgrade failed - exit status=127
...

Hi Team,

We were using Appliance called Solutionary to monitor the firewall logs previously. It used to give me a report similar to the following. Now we have removed the appliance from Network....

[Expert@******SMTSRV:0]# free -k
total used free shared buffers cached
Mem: 7942620 7890624 51996 0 153076 4050300
-/+...

Hi Team,

I'm trying to find out the Unused objects on my Management server. I have found some objects through Query > Unused objects .
Is there any way to find the objects which is used in some...

gaia R 77.30
Distributed

Hi Team,

I'm running my environment with Distributed architecture and managing 2 cluster objects contains 2 firewalls on each cluster.
The rulebase has nearly 350 rules for each cluster and no of...

Hi Team,

I have tried checking through proxy. What is happening there is no option to point out the Carbon black sensor (Client side agent) towards the proxy server.
Is there anymore option i can...

Unfortunately we do not have a proxy in our environment, if it is there i need not to have an application control and URL filtering enabled on the firewall

Hi Team,

We are in a process of implementing the Carbon black Next-Gen Antivirus in our environment. Unlike any anti-virus vendor carbon black doesn't have any centralized management to control...

Yes, I'm blocking the Unknown category in my configuration.
I'm curious to know how to re-categorize the HP sites to some known application category.

Hi Team,

I have allowed HP FTP site in the Application control policy. When i try to access the site from the server it's getting blocked and category is showing as unknown traffic.
Can someone...

Hi Team,

I need a help to implement the following scenario:

We are running Gaia R77.30 with Firewall and Application URL filtering blade. In our current setup we have allowed Internet_IP's to...

Hi Team,

We are running our firewall in Gaia R77.30 with Application & URL filtering and HTTPS inspection enabled with it. We have a requirement of installing Carbon black antivirus in our...

Hi mcnallym,

Thanks for the reply. I will try it.

Hi Team,

Is it possible to have a 2FA (like RSA) to login to GAIA portal and Smart dashboard.

Hi Mcnallym,

Thanks for the response!
If you don't mind can you please elaborately explain what is happening once you install the certificate on client's trusted store.

Hi Team,

We have enabled Application control & URL filtering blade without Https inspection in our environment over 3 months back. Now we are going to enable the Https inspection feature in it....

Hi Mcnallym,

Thanks for the reply. I will go through the guide mentioned by you and will post in case i struck somewhere.

Once again thanks a ton!

Ram T S

Hi Team,

I'm running a cluster setup with R77.30 GAIA and recently bought IPS license. Can somebody advise me the phases to deploy the IPS which will prevent any kind of unknown outages.
I'm...

Hi,

Management server:

Please go ahead and do a upgrade for management using R77.30 upgrade package.

Security Gateway:

Please take a screenshot of Interfaces, routes and any other...

Hi,

Management server:

Please go ahead and do a upgrade for management using R77.30 upgrade package.

Security Gateway:

Please take a screenshot of Interfaces, routes and any other...

H ITeam,

I have a requirement. I'm using Checkpoint 4400 firewall running in R77.30. I need to form a IPSec tunnel with ASA firewall which uses dynamic public IP. Is there any document to achieve...

Hi Team,

I have Management server running in R76 Gaia version. Unfortunately i lost all my passwords and old known backup. I found there is a procedure mentioned in "sk92663". But my only worry is...

Thanks for the solution!

I have booted the box in maintenance mode and edited the /etc/passwd file. Now it's working fine.

Hi Team,

Today morning i have ran the following command in the firewall to change the shell.

chsh -s /etc/cli.sh admin

After this the firewall is logging out as soon as enter username and...

Hi Team,

I have checkpoint 4400 appliance(standalone) running with Gaia R76. I need to setup a site-to-site tunnel with ASA device which has a dynamic IP enabled on the external interface. Is it...

Thanks a lot for the information team. Let me configure and get back in case of any discrepancies.


Regards,
Ram T S

Hi Team,
Can we run route based vpn and policy based vpn on the same firewall???

Regards,
Ram T S

The below article i found in the CPUG forum. Will it work?

Using cpinfo to Re-create a SmartCenter
You can do this partially. The cpinfo should have a copy of most of the files in the conf...

Hi Team,

We are running our distributed setup in R76 version. Recently our Management server got crashed and unfortunately i don't have upgrade_export backup to rebuild the management. Is there...

Hi Team,

Hope all are doing good.

I'm facing a issue in our VSX environment. We are having 2 9070 VSX gateways running with 7 virtual systems and 1 virtual switch. Both the firewall is in Load...

Thanks for the reply jdmoore0883. I will go with R75.47 as of now.

Hi,

Thanks for the reply. Is there any release notes which stat 1GB RAM is sufficient for R75.47.

Hi All,

What is the last available checkpoint package for IP 390 flash based appliance which is running with 1 GB of Ram and IPSO 6.2 and R75.40 currently.

Thanks in advance!

Hi,

I had a similar issue. When i tried checking the Smart Tracker some requests was dropped by Stealth rule of the firewall. I tried disabling stealth rule and created the rule for DHCP 67 and...

Hi Bhav,

Open any services between Management server and the Gateway. Since the communication between the Management and Gateway is Secure need not worry to open a any port. Once the SIC(Secure...

Hi Team,

I have followed the sk43807 and checked the https and http advanced properties. There the option "Synchronize connections on Cluster" is already enabled.
And checking about step 3 we are...

Thanks Brain and Cory.

I will perform the same and update you the status.

Hi Folks,

In our setup we are using one central management server and 2 firewalls in a Active/Standby cluster. We have enable Antibot/Antispam blade and configured auto update of database for...

Thanks for the reply.

That SK mentioned by you has mentioned the product as "UTM-1 and Security Gateway".
We are running on the VSX environment. Does it applies for us also. Kindly reply.

Hi Team,

We are running VSX 9070 in a cluster mode with 8 firewall instances. We lost password for the one of the firewall. We are running with R67.10.
Kindly help or suggest to reset the...