CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Search:

Type: Posts; User: Serji

Search: Search took 0.00 seconds.

  1. Replies
    1
    Views
    1,055

    Placing SCS in your network

    Hello guys.

    Now I'a little bit confused in choosing where to place my New Smart Center server. This is not my first installation, but now I don't know what place will be best.
    It will be logical...
  2. Replies
    0
    Views
    833

    CP-EDGE-NW-8-users RADIUS source address

    Hi,
    can I change RADIUS request source address?
  3. Replies
    4
    Views
    4,959

    Gaia LAN dhcp server

    Does Gaia support dhcp reservation and additional dhcp options?
  4. Re: Remove Anti-Bot & Anti-Virus blade from SmarView Monitor

    the same problem
  5. Replies
    1
    Views
    1,313

    Re: GAiA script on boot/cpstart

    /bin/cpstart_start is not work
  6. Re: Thread: R75.40: Migrating from Standalone to Distributed (sk61681)

    Косяяяк
  7. Replies
    1
    Views
    1,313

    GAiA script on boot/cpstart

    Any changes compared with SPLAT?
  8. Thread: MSECP 2008 R2

    by Serji
    Replies
    2
    Views
    1,410

    Re: MSECP 2008 R2

    Maybe SmartCenter doesn't support SHA1 hash in scep???
  9. Thread: MSECP 2008 R2

    by Serji
    Replies
    2
    Views
    1,410

    Re: MSECP 2008 R2

    [FWM 2912 1951549120]@MHQT-CHKPNT01[24 May 10:48:04] X509 Certificate Version 3
    Serial Number: 1c8f911cfe470b8f4e4a81e76f06b29c
    Issuer: CN=checkpoint-MHQT-SOLAR01-CA,DC=checkpoint,DC=lab
    Subject:...
  10. Thread: MSECP 2008 R2

    by Serji
    Replies
    2
    Views
    1,410

    MSECP 2008 R2

    Does it work?
    I've configured this feature and I see that in Certificate console it have certificate that I requested, but via console I see:

    The communication with the Certificate Authority...
  11. Replies
    3
    Views
    1,300

    Re: VRRP cluster Check Point + another device

    I don't need to sync session table between them. I need failover only.
  12. Replies
    3
    Views
    1,300

    VRRP cluster Check Point + another device

    Hello all!
    Does it possible to create cluster with another device such as cisco?
    They are support VRRP too.
  13. Replies
    9
    Views
    2,460

    Re: GAIA Interface assigment

    Great!
  14. Replies
    9
    Views
    2,460

    Re: GAIA Interface assigment

    As I understand, there is no such solution as ethtab.
  15. Replies
    9
    Views
    2,460

    Re: GAIA Interface assigment

    anybody?
  16. Thread: TMG behind CP IA

    by Serji
    Replies
    1
    Views
    1,283

    TMG behind CP IA

    Hi all,
    I heared that I can install plugin on TMG to view clients (that use TMG as a proxy) in CP logs.
    Does it true?
  17. Replies
    9
    Views
    2,460

    Re: GAIA Interface assigment

    We have some troubles with integrated broadcom interfaces.
    Also I need the same interface names for cluster!
    So, anybody knows the answer?
  18. Replies
    9
    Views
    2,460

    Re: GAIA Interface assigment

    You don't understand me, Boy,
    I need to reassign them to real interfaces. I need to move my eth0 from the integrated interface to other interface on switch card.
  19. Replies
    9
    Views
    2,460

    GAIA Interface assigment

    Hi,
    Where is /etc/sysconfig/ethtab? And how I can assign interfaces in gaia?
  20. Replies
    0
    Views
    848

    RIM summary routes

    Hi all,

    Anybody did it? I need to summary my routes that injected to the kernel routing table, then I redistribute them to another protocol.
    I saw custom_rim.sh but know how I can program it for...
  21. Replies
    3
    Views
    1,388

    Re: different licenses for cluster

    Thats strange, cause I can't find CPSG405-HA in the new pricelist...407i or 409 only...
    so what I need to buy to make cluster working fine?
  22. Replies
    3
    Views
    1,388

    different licenses for cluster

    Hi all,

    CPSG409
    CPSG407i-HA

    Can I create cluster only with 407i blades enabled?
  23. Replies
    1
    Views
    2,715

    Re: Failed to initialize NATIVE APPLICATION

    Try to download and Install cvpn_HOTFIX_FIJI_HFA_FFSW_HF_401.tgz
    this hotfix can help you.
  24. Thread: SNX E75 port

    by Serji
    Replies
    0
    Views
    1,185

    SNX E75 port

    Will it be ported to Connectra NGX R66.1? anybody knows?
  25. Re: R66.1 - Route to clients vs. NAT behind Connectra address?

    For access to your vpn clients you need to create native app, click Connection direction -> Server to client.
    Thats all!
  26. Replies
    1
    Views
    2,033

    MSI install from abra

    Hi all,
    how to install msi package inside my abra R70.1 device?
    I was read 1 topic on checkpoint forum that was dated 1 year ago and there was restrictions for msi.

    1 more...how to add trusted...
  27. Replies
    1
    Views
    2,804

    156-915.71 VUE registration with promo code

    Who was take it with 50 % off?
    Get Check Point Certified for HALF OFF! | Check Point Software
    I try to register my VUE account but the cost is 200$ and no any promo codes is acceptable. :(
  28. Replies
    0
    Views
    1,585

    SmartView tracker R75 hungs

    Well, does anyone try to use R75? all works fine? After fresh installatin and adding 1 CPEdge my SMTracker
    don't want to open. I was try many solutions except reinstall SCS or simply downgrade to...
  29. Replies
    5
    Views
    2,067

    Re: Intermittent DNS Resolving

    hello,

    this is not enough information that you say about your problem. Firtsly try to change ccp packets to broadcast. From expert mode:
    "cphaconf set_ccp broadcast" on both devices then reboot...
  30. Replies
    5
    Views
    7,445

    Re: fw monitor & tcpdump

    Thanks! Very useful
  31. Replies
    0
    Views
    1,664

    Checkpoint debugging tool for windows

    New checkpoint debugging tool: CPDebugger
  32. Replies
    0
    Views
    1,732

    Iphone 4G connection failed

    Hello,
    I was search information of this thread in user center and there...
    Had anyone try to connect iphone 4G OS version 4.2.1 to connectra r66.1 with updated SNX version?
    After successful...
  33. Replies
    2
    Views
    1,693

    Re: Check Point Certified Endpoint Security Expert

    :) Congratulations!

    How hard it was? As I understand you was prepare with guides and self-experience. How long you was
    work with this product?

    Thnx
  34. Replies
    2
    Views
    1,693

    Check Point Certified Endpoint Security Expert

    Had anyone passed this exam? As I see R70 version available now for testing, but R75 released.
    When will new version exam be available? Any books (excluding guides)?

    Regards,
    Sergey
  35. Replies
    3
    Views
    1,973

    re: Authentication SSL VPN clients with IAS

    Yes, thats great solution!!!! Why I wasn't find it earlier... :) Thanks!

    And in additional I want to know how I can define external user profile by DN, not by domain and separator? I was try to...
  36. Replies
    2
    Views
    3,828

    Re: Windows 7 64bit L2TP client

    What about UDP 4500 port ?
  37. Replies
    3
    Views
    1,973

    Authentication SSL VPN clients with IAS

    Hello guys,
    I'm trying to authenticate users via radius protocol released on Microsoft IAS.
    Now I have some problem to separate users into goups. If someone was did it please
    write. What I need...
  38. Re: Script for IPSO/VRRP: Switch VRRP-Master > Backup

    Did you watch the ability to use snmp?
  39. Replies
    15
    Views
    6,866

    Re: Checkpoint SSH GUI

    Hi all!

    With CP Debugger you can run debug operations via GUI, it will automatically upload necessary
    files via scp on your PC after stopping debug (and can compress them before transport and...
  40. Replies
    2
    Views
    2,457

    Re: Need CCSE Plus NGX R65 materials

    this is still ngx version...not ngx r65
  41. Thread: Exam in 7 days

    by Serji
    Replies
    3
    Views
    2,730

    Re: Exam in 7 days

    Any news? Did exam was not easy to pass?
  42. Re: Configruration VPN site to site between Checkpoint NGX and Router Cisco 1861

    try to access-li 110 permit ip any any

    in vpn community configure tunnles per subnet

    and check domain,does packets nated when encrypts?
  43. Replies
    7
    Views
    2,495

    Re: Script for specific log message

    You don't understand properly...ok )
  44. Replies
    7
    Views
    2,495

    Re: Script for specific log message

    Yes, this is log message and I can see it via Tracker, but I have one message that can indicate problem and problem can be no more 1 or 2 minutes. For find issue I need script that will dump traffic...
  45. Replies
    1
    Views
    1,345

    Re: multiple gateway behind the same NAT

    Hi,

    This is because UTM-1 edge cannot connet to hub with office mode ip. There is
    problem when phase 2 refresh keys. IPSEC SAs identifies with ip address and SPI. When tunnel is reinitiates then...
  46. Replies
    7
    Views
    2,495

    Script for specific log message

    Hello,

    I need to write script for specific log message that comes from UTM-1 Edge.

    How I can do it? :)
  47. Replies
    9
    Views
    1,763

    Re: Cluster IPs with different subnets

    Hello,
    Can any say me a page in CLusterXL R65 guide where I can read this solution??

    Thanks.
  48. Replies
    9
    Views
    1,763

    Re: Cluster IPs with different subnets

    may be you can provide me page number?
    I can't find it in gude :)
  49. Thread: Sync port

    by Serji
    Replies
    8
    Views
    6,183

    Re: Sync port

    TCP 256 is used to full sync management HA as I remember in additional.
    UDP 18116 for ClusterXL

    ..or I'm wrong?
  50. Replies
    2
    Views
    2,457

    Need CCSE Plus NGX R65 materials

    Hi all,

    I have only Check Point Administration III (NGX), and documentation...
    Can you provide NGX R65?
    Thanks.
  51. Replies
    9
    Views
    1,763

    re: Cluster IPs with different subnets

    can you give me url (s) ?
  52. Replies
    9
    Views
    1,763

    Cluster IPs with different subnets

    Hi all,

    I need to configure my CLusterXL solution with the next:


    Node_1 external ip: 192.168.10.10
    Node_2 external ip: 192.168.10.20
    ClusterXL external ip: 212.111.22.22

    so, how I can...
  53. Replies
    4
    Views
    3,406

    Re: Help to configure Websense 7.1

    Hi,

    There was a problem that I was install standalone, I was reinstall with checkpoint integrated. Why this is not recommended to establish trusts with checkpoint before basic configuration?
  54. Replies
    4
    Views
    3,406

    Re: Help to configure Websense 7.1

    I was create OPSEC UFP server with websense host and pull certificate to it. But in /bin directory I can't find any .conf file as write in documentation and any running service. Can you say me how to...
  55. Replies
    4
    Views
    3,406

    Help to configure Websense 7.1

    Hi all,

    I can't find any documentation for configure Websense for working with my NGXR65. I use Websense 7.1, and I can't find any UFP service in curenntly running websense services. 7.1 not...
  56. Replies
    1
    Views
    1,343

    Provider-1/Sitemanager-1 product question

    Hi all,
    I'm a newer in check point products and have may be some funny question.
    I was download Provider-1/SiteManager-1 for SecurePlatform. After install I can't find MDG for it...
    Where I can...
Results 1 to 56 of 56