yurisk.info

Yuri Slobodyanyuk's blog on IT Security and Networking sharing experience and expertise

SCP and Checkpoint R75 problems

There is a known issue with transferring big files (bigger than 1 Mb) from/to SecurePlatform firewall by Checkpoint you should be aware of. The file transfer fails with some error about buffers. The problem is that Checkpoint firewall SPLAT comes with the old opensshd daemon , which has a bug in it dated 2006  ( https://bugzilla.redhat.com/show_bug.cgi?id=184357 ) causing transfer to fail if SCP client is trying to  use buffer bigger than 1 Mb . And as (the only) Windows based client WinSCP (that in turn uses putty code) has  been using buffer larger than that for ages, trying to use versions of WinSCP newer than 3.x results in failure .
Checkpoint have a hotfix for that, according to SK sk66195, but the less intrusive alternative is to use  older versions – pscp 0.60 and Winscp 3.x (e.g. 3.7.4)



3 Comments

  1. Winscp 4.1.9 is also not impacted by the bug and can still be found for download on the web .

  2. Yuri

    July 26, 2012 at 9:26 am

    Thanks Tomas, I also saw somewhere on Checkpoint site that version 4.1 should work,
    only that I didn’t find it then to test .
    Yuri

  3. Thanks, I searched 3 days in our environment for a solution, thought there is something else wrong, until I found that Article.

    You can find the older WinSCP Versions here: http://sourceforge.net/projects/winscp/files/WinSCP/

Comments are closed.

© 2016 yurisk.info

Theme by Anders NorenUp ↑