CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Search:

Type: Posts; User: fasteddye

Search: Search took 0.00 seconds.

  1. Re: Traffic destined for Private IP Address that does not exist - AntiSpoofing

    We ended up creating a rule to drop traffic from RFC1918 networks (excluding our DMZ networks) destined to RFC1918 networks (excluding our DMZ networks).
    Thanks PhoneBoy!
  2. Re: Traffic destined for Private IP Address that does not exist - AntiSpoofing

    Thanks for the reply and the NAT suggestion definitely makes sense. I agree that since this traffic is destined for an internal address that does not exist it probably be best to drop the traffic. ...
  3. Traffic destined for Private IP Address that does not exist - AntiSpoofing

    I have been reviewing firewall logs and notice quite a bit of Anti Spoofing traffic. We run OSPF on our enterprise but Static Routing on the Firewall. On our core internal routers we have a gateway...
  4. Replies
    9
    Views
    3,618

    Re: Hide NAT Address Range

    Thanks for reply and the sk76800. These firewalls are not running CoreXL. According to that secure knowledge document since we do not have CoreXL enabled IP Pool NAT should be supported, is my...
  5. Replies
    9
    Views
    3,618

    Hide NAT Address Range

    We are going to be directing all of our internet traffic through our pair of CheckPoint IP Appliances running R77.10 in a VRRP configuration. We currently run our internet traffic through a...
  6. Re: Cron Job to automate deletion of /var/log files

    Yes I am running it Sunday at 3am.

    It ran successfully this past Sunday at 3am and deleted the log files greater than 90 days.

    Thanks so much for the help.
  7. Re: Cron Job to automate deletion of /var/log files

    We are on SPLAT.

    I did have find command but left it out of my post, thanks for catching that.

    Aside from adding the -type f it looks good? What is the function of the {} and \; in the...
  8. Cron Job to automate deletion of /var/log files

    Hello. I am looking for an automated way to delete log files from the /var/log directory. We have our log files being sent to the management server. Our end goal is to keep the last 90 days worth...
  9. Replies
    9
    Views
    4,748

    Re: Migrating from ClusterXL to VRRP

    It is a surprise that CheckPoint would want to go away with a standards based protocol such as VRRP. Another reason to switch to VRRP is currently static arp entries are required with the Cluster...
  10. Replies
    9
    Views
    4,748

    Re: Migrating from ClusterXL to VRRP

    Wow, thanks for all the feedback. We have not had any problems running in ClusterXL Load Sharing configuration. One reason for the change is troubleshooting would be much easier in Active Standby...
  11. Replies
    9
    Views
    4,748

    Migrating from ClusterXL to VRRP

    Hello.

    We are looking to migrate a cluster from ClusterXL to VRRP. This has been in a ClusterXL configuration for years. We will have a maintenance window to accomplish this task but I wanted to...
Results 1 to 11 of 11