CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Search:

Type: Posts; User: sachden

Search: Search took 0.00 seconds.

  1. Replies
    0
    Views
    3,048

    SNX Query for Checkpoint GAIA

    Hi Experts

    1.I have a query for SNX Remote access VPN . The option is available under the firewall gateway properties listed under VPN Clients tab . The SNX option is also available under Mobile...
  2. Replies
    5
    Views
    3,143

    Re: Reg ClusterXL magic MAC settings

    Hi bmolnar

    Thanks for answering my query .

    Dear Experts ,

    Can anyone who has encountered similar issue recently , update on this thread ? Would really appreciate that .


    Thanks
  3. Replies
    5
    Views
    3,143

    Re: Reg ClusterXL magic MAC settings

    Hi bmohar,

    Thanks for reply , i have few questions

    a) what is meant by Forwarding Layer traffic ?

    b) As per the SK 25977 , When more than one cluster is connected to the same VLAN /...
  4. Replies
    5
    Views
    3,143

    Reg ClusterXL magic MAC settings

    Hi Experts,

    I am using 2 pair of Checkpoint GAIA R75.46 appliances which will be connected to a Single Cisco switch . Each pair is Active-Standby running Cluster XL High Availability New Mode ;...
  5. Replies
    3
    Views
    3,122

    SNMP over the VPN is not working

    Hi experts,

    I am facing issue in configuring SNMP over VPN . I have checkpoint SPLAT at one end and Checkpoint 4000 appliance at the other end .The VPN is already established .The SNMP Management...
  6. Re: Migrating UTM 2070 HA Pair from Standalone to Dsitributed

    jejerod,

    a) As you said that " The ready/active mechanism don't work when the CP versions differ too much" , do you mean to say it MAY not work in my case as well ? i.e going from R75 to R75.20 ...
  7. Re: Migrating UTM 2070 HA Pair from Standalone to Dsitributed

    jejerod,

    please guide me on the previous query , thanks !


    Ankur
  8. Re: Migrating UTM 2070 HA Pair from Standalone to Dsitributed

    Jejerod

    thanks for the excellent explanation !! regarding my query (a) , i just want to know about the Primary member , will it get effected because the secondary in production is undergoing...
  9. Re: Migrating UTM 2070 HA Pair from Standalone to Dsitributed

    Serlud and jejerod,

    thanks for your help on this

    jejerod,

    I want to ask few things

    a) While the Standby is getting re-installed to R75.20 , does it needs to be pulled out of the network...
  10. Migrating UTM 2070 HA Pair from Standalone to Dsitributed

    Hi Experts

    I have 2 UTM-2070 currently running R75 in High Availability . The Management Server component is also installed on these 2 boxes thus making it Standalone .There was some issue...
  11. Re: Command to find out the Hardware make and model

    bmolnar,northlandboy

    excellent , "dmidecode" is the command what i wanted.i got all the necessary info now.thnx !!

    Ankur
  12. Command to find out the Hardware make and model

    Hi Experts

    Is there any command in SPLAT with which i can find out as to what is the make and model of the Server [ for eg: if i want to know whether it is HP or IBM Server ] on which firewall is...
  13. Re: Replace the Current firewall with a Backup firewall

    Hi RayPesek

    Please let me know about my above queries . Just for your info , i am going to do a clean installation of the firewall from the scratch .


    Ankur
  14. Re: Replace the Current firewall with a Backup firewall

    Hi RayPesek ,

    Thanks a lot for the step by step detail and valuable inputs ; however can you please tell me if the above process mentioned by you is done without a "backup" and "restore " command...
  15. Re: Replace the Current firewall with a Backup firewall

    Hi cciesec2006,

    thnx a lot for the reply .

    a) i would like to know if "snapshot" of the firewall will take a good considerable amount of time ? Does it include the log files also ? If yes , is...
  16. Re: Replace the Current firewall with a Backup firewall

    The Spare Hardware is afresh and doesnot have anything installed on that . The Management Server is a separate SPLAT Appliance .I just need to replace the current SPLAT Firewall with this spare one...
  17. Re: Replace the Current firewall with a Backup firewall

    Yes , it is identical hardware . Can you please let me know as to what approach i should take . backup and restore OR snapshot and revert ? Also let me know if there is a guide which can tell me step...
  18. Replace the Current firewall with a Backup firewall

    Hello experts,

    I am in the process of replacing my current CP Firewall R75.20 Build 095 (running on SPLAT ) with a spare firewall (kept as a cold standby spare hardware) just to check whether the...
  19. Replies
    1
    Views
    2,349

    Nokia IPSO Job scheduler

    Hi all

    Please guide me in writing the command for backing up the Nokia IPSO Job scheduler command.I am trying to automate the backup to the FTP Server ,please let me know what command to type in...
  20. License query for NGAI R55 Standalone on Nokia

    Hi

    I have a Nokia IP 350 IPSO 3.8.1-BUILD 029 which is in standalone mode running with 256 MB RAM and NGAI R55.i am planning to upgrade the IPSO to 4.2 & NGXR65 .For this i will be first making...
  21. Replies
    1
    Views
    1,532

    Issue regarding Sync interface in Nokia

    Hi

    We have Nokia boxes running in Cluster load sharing environment , the issue is that while doing cphaprob stat in the Primary Module (A.B.C.98), i get output which shows the status of only 1...
  22. Replies
    16
    Views
    6,071

    Re: Nokia IPSO 3.8 R55 Upgrade to R65

    Hi

    thanks for the coments . This is Nokia IP 350 Box . As the box cannot be immediately replace we have to think for a workaround .Also we only have a spare Windows 2k3 Server SP2 , 3.25 GB RAM...
  23. Replies
    16
    Views
    6,071

    Re: Nokia IPSO 3.8 R55 Upgrade to R65

    Hi belvdr / all

    Thanks all for your guidance

    I have below query

    1)You have mentioned that IP330 is supported to run up to IPSO 4.0.1 and NGX R61 on it.If it is so , is it
    suggested to...
  24. Replies
    16
    Views
    6,071

    Nokia IPSO 3.8 R55 Upgrade to R65

    Hi

    I have a Nokia IP 300 3.8.1-BUILD 029 Box in Standalone mode .Its running with 256 MB RAM and is running with NG AI R55.I want it to upgrade it to R65

    i have few queries regarding the same...
  25. Re: Upgrading NGXR61 to R65 on a Standalone Windows

    Hi

    thanks a lot .I am planning to go for an installation on another server .I will be using the upgrade_export of the NGX R65 CD and will put it in the current NGXR61 machine in the bin folder...
  26. Upgrading NGXR61 to R65 on a Standalone Windows

    Hi

    We have a Checkpoint running on Windows 2003 Server SP2 (1 GB RAM) in a Standalone mode with the below valid license .I have few queries :

    1)Is it recommended to have an additional Windows...
  27. Replies
    19
    Views
    4,797

    Re: License clarification for Load Sharing / HA

    Hi

    As we have IPV6 License also along with NGXR60 , please let me know if the support will be till 2010

    Regards
    Ankur
  28. Replies
    19
    Views
    4,797

    Re: License clarification for Load Sharing / HA

    Hi mcnallym

    Thanks for the detailed explanation !!

    However in my query i was asking regarding NGX R60 support expiry as we have IPV6 (CPMP-IPV6-1) License also in addition to above 3...
  29. Replies
    12
    Views
    3,614

    Re: SPLAT and MGMT Server upgrade from R60 to R65

    Hi

    thanks a lot for your guidance ! may be i was little mislead by that statement .One more small query I have 2 SPLAT Boxes (Load sharing) both running with 2GB RAM Please let me know if it will...
  30. Replies
    19
    Views
    4,797

    Re: License clarification for Load Sharing / HA

    Hi

    thanks a ton for guidance . I also want to know that we have license for IPV6 (CPMP-IPV6-1).so does that mean if i am running my CP ON SPLAT (NGXR60) and wants to upgrade to R65 , i will have...
  31. Replies
    12
    Views
    3,614

    Re: SPLAT and MGMT Server upgrade from R60 to R65

    Hi

    Thanks a ton for clarification . I have found a sentence in the notes of products and platforms supported by the NGX R65 release "ClusterXL is supported only in third party mode with VRRP or...
  32. Replies
    12
    Views
    3,614

    Re: SPLAT and MGMT Server upgrade from R60 to R65

    Hi

    thanks a lot !! however please let me know regarding point 4 .Is it like applying HFA50 will already contain the patch 249

    Also in point 6 , what i wanted to ask if NGXR65 can be or is...
  33. Replies
    12
    Views
    3,614

    Re: SPLAT and MGMT Server upgrade from R60 to R65

    Hi northlandboy

    Few weeks back i have raised some queries with you on this thread . Although i have read the maximum however still i have few queries .Hence i request yourself or senior members of...
  34. Replies
    19
    Views
    4,797

    Re: License clarification for Load Sharing / HA

    Hi

    thanks for the reply , vendor has given us below license nd our firewall is running on below 3 for past few years .Please let me know as to whether the Failover license(a) is required or not...
  35. Replies
    19
    Views
    4,797

    Re: License clarification for Load Sharing / HA

    Hi

    thanx a lot !!! Also please let me know if i am currently just going with Load sharing on SPLAT , do i need a Failover license too ?Is HA License required as i have already Cluster XL Load...
  36. Replies
    19
    Views
    4,797

    Re: License clarification for Load Sharing / HA

    Hi
    I have following query

    For SPLAT (in cluster) and Load sharing i am having following licenses .Please let me know if i am currently just going with Load sharing on SPLAT , do i need a...
  37. Replies
    3
    Views
    3,352

    Re: Unable to determine SPLAT Version

    Hi

    thnx all ...that answers my quest

    regards
    Ankur
  38. Replies
    3
    Views
    3,352

    Unable to determine SPLAT Version

    Hi

    We have 2 SPLAT box (Active - Active) having the following details .I need to upgrade the R60 to R65 ;however some one has told that SPLAT 2.6 is not stable , specially with HFA 30.hence i...
  39. Replies
    19
    Views
    4,797

    License clarification for Load Sharing / HA

    Hi

    We have a pair of Nokia Firewalls which are configured in VRRP .For making them Active Active (Load sharing ) via Nokia IP Clustering protocol , will i require a Load sharing license...
  40. Replies
    4
    Views
    2,101

    Re: Reg. changing time on Nokia Box

    Hi

    thanks for the update.We tried changing the time and clusterdidnt break however when we changed the time on 1st box it didnt get updated in another box(both box are in cluster) and we had to...
  41. Replies
    4
    Views
    2,101

    Reg. changing time on Nokia Box

    Hi

    We are having 2 Nokia boxes in Cluster .They are running with slightly different timings . I want to make the time same on both the boxes , hence want to know if the cluster will break or not
  42. Replies
    12
    Views
    3,614

    SPLAT and MGMT Server upgrade from R60 to R65

    Hi

    We are planning to upgrade the Checkpoint SPLAT Box along with Management server (Distributed mode scenario).The firewall is runnning in Load sharing UNICAST MODE .Below are the specifications...
  43. Replies
    2
    Views
    2,571

    Re: Regarding CCSE Plus logo

    hi sebastan

    I never know that i cn cerate my own user centre account .As i have cleared CCSE Plus , will i have some privileges for that account . Please guide

    Ankur
  44. Replies
    12
    Views
    13,146

    Re: Cron job to run upgrade_export

    Hi cciesec2006

    Please let me know if i have a desktop on which SCP Utility is installed (eg: WinSCP) , how will SPLAT auto backup those files to that desktop ? What i want to ask is that how you...
  45. Replies
    3
    Views
    3,549

    Re: CP integration with LDAP

    Hi all

    I wanto integrate CP with AD / LDAP as in the Smart view tracker i want to see the user IP Address along with their Windows AD user IDs as we have DHCP in customer setup and the user...
  46. Replies
    2
    Views
    2,571

    Regarding CCSE Plus logo

    Hi

    I have just cleared ccse plus .Please let me know as to how can i get the certification logos

    Regards
    Ankur
  47. Reg. disabling services while installing fw1 on NT

    Hi

    Has any body installed fw1 on Win NT i have a ques .Which of the these should be disabled in windows nt while installing fw1

    wins , rpc , netbios , dhcp relay or all of these

    Regards...
  48. Replies
    1
    Views
    1,620

    Reg. smart monitor pop up

    Hi
    I am getting error in Smart monitor "Conn table is 80% full , please consider increasing the table limit :vpn-1 and firewall-1".Please let me know asto what to do with this info .

    Ankur
  49. Replies
    9
    Views
    9,930

    Checkpoint rule hit counts

    Hi

    Please let me know as to if there is any tool which can enable me to see the no. of hit counts for a particular rule in a checkpoint


    Ankur
  50. Replies
    2
    Views
    1,772

    Regular Checkpoint backup

    hi all

    I am having a Checkpoint NGX R60 on a Windows box in the standalone mode. The issue is that i am not able to backup the config via upgrade_export.Please fidn the snapshot attached .I have...
  51. Replies
    1
    Views
    1,786

    Eventia Reporter error

    hi

    We are getting attached error for Eventia reporter as connection tables is not showing any data . Please let us know the probable causes for the same

    Ankur
  52. Replies
    12
    Views
    13,146

    Re: Cron job to run upgrade_export

    Dear cciesec2006

    Please reply to my query , its urgent .Please help

    Ankur
  53. Replies
    12
    Views
    13,146

    Re: Cron job to run upgrade_export

    Hi I have a CP SPLAT Box in cluster mode and i want to automate the backup as per above script 1)Please let me know as to how to configure above script in SPLAT Box . I have created a file named "...
  54. Replies
    2
    Views
    1,594

    Reg. Source-based routing

    Hi

    Please let me know as to how to configure Source-based routing in the Checkpoint VSX Box

    Ankur
  55. Thread: Email alerts

    by sachden
    Replies
    1
    Views
    1,736

    Email alerts

    Hi

    Does anyone know if it is possible to configure email alerts for smart defense signatures .Suppose a signature triggers more than 20 times so can we configure signature for a threshold that at...
  56. Replies
    3
    Views
    3,549

    CP integration with LDAP

    Hi all

    Can someone please forward me the document as to how to integrate Checkpoint firewall with LDAP . Please let me know if anybody has configured this and would appreciate help if a document...
  57. Replies
    5
    Views
    2,086

    Re: Overlapping Networks in VPN

    Dear Mariol

    I would like to intimate you that with the same config , i have myself resolved the problem yesterday . Anyhow i am really thankful to you for posting this and glad to know that...
  58. Replies
    4
    Views
    2,016

    Re: Peer Gateway can be dynamic??

    Hi

    Please send PDF to my email ID also . I also have curosity to know as to how Dyn VPNs can be configured .Thanks in advance

    My emailid : ankur.sachdev@gmail.com

    Regards
    ANKUR
  59. Replies
    5
    Views
    2,086

    Re: Overlapping Networks in VPN

    Hi mariol

    The crypto acl in the VPN Conc (my end ) includes 192.168.70.12 (which is a free IP) which is my side Local LAN .Remote users (10.34.226.0/24)should connect to this IP which will hit the...
  60. Replies
    5
    Views
    2,086

    Overlapping Networks in VPN

    Hi All

    There is an issue when i am trying to establish VPN TUNNEL between PIX (remote gateway) and VPN Concentrator (my end) .The perimeter gateway at my end is Checkpoint firewall (one of the...
  61. Replies
    2
    Views
    14,839

    Requirement for "fw unload local" command

    Hi all

    We manage lot of Checkpoint firewalls for our customers.During one of the issues a CP Mgmt Server (for which we take RDP) was rebooted , it came up however only onsite engineer (at...
  62. Replies
    6
    Views
    4,584

    Re: Reg. Split tunneling

    Hi

    Can you tell me in which tab it is already configured.It will be of great help
  63. Replies
    1
    Views
    2,073

    Reg. resetting the Site to Site VPN tunnel

    Hi

    Anybody having an idea as to how to reset the Site to Site VPN Tunnel in checkpoint if the tunnel is established and some of the subnets (say 192.168.1.0) between Local AND Remote LAN are able...
  64. Replies
    6
    Views
    4,584

    Reg. Split tunneling

    Hi everybody

    I would like to know if it is possible to do Split tunneling in Checkpoint just like we can do in Cisco VPNs .


    Regards
    Ankur
  65. Replies
    3
    Views
    2,001

    hello everyone ! this is Ankur

    hi everybody !

    I am Ankur from Wipro , India and have recetly joined this forum.Iam CCSE , pursuing CCSE Plus and would like to know more on Checkpoint on command line , although i have been...
  66. Replies
    23
    Views
    9,422

    Re: I have just Passed CCSE+

    Hi,

    I'm currently a CCSE on NG-AI.

    Can someone confirm if this allows me to move on to do CCSE+ on NGX or if I have to start from scratch again, doing CCSA NGX, CCSE NGX, before doing CCSE+...
Results 1 to 66 of 66