Checkpoint NG/NGX




Checkpoint - turn netconf.C routes into linux route command

I must confess that I prefer good solutions today over perfect solutions tomorrow. So when the need aroused to do a script that takes netconf.C and transforms all the route statements in it to the general linux form of "route add xxx" I did this one-liner you can see …



Find SmartCenter address on the firewall module

I am sure there are gazillion ways to find the IP address of the managing this module SmartCenter/ Security Management Server, but here comes the one I use. Works on firewall module as well as on the SmartCenter itself , even more - gives the same result, surprising no ? [Expert@FW-XL1]# fw …



Subnet calculator in Checkpoint firewall

Should you ever forget intricacies of the subnetting Checkpoint have subnetting calculator right in their firewalls - ipcalc. Given subnet show the 1st Ip (network) : ipcalc -n 192.168.34.45/27 NETWORK=192.168.34.32 Given subnet show the last IP (broadcast) : ipcalc -b 192.168.34.45/27 …



Restart Checkpoint Smart Center/Management Server only, without traffic interruption

It comes to the top 10 questions I hear on a daily basis so here is how to restart Checkpoint Smart Center only (Security Management Server). It is especially useful in Standalone firewall topology, where the Management Server and Firewall module are installed on the same machine and you don't …



Restart SNMP daemon on Checkpoint

While not being anything noticeable by itself, the problem was that all monitored snmp values were normal but cpu showed 100% on the Open server with 8 CPUs , it did remind me that you should always record the current state before doing the changes. As I said it was an …



Keep your Checkpoint IPS updated

The IPS protection should be up-to-date, no arguing here. But should it also be automatic ? Well, here Checkpoint thought that not and put no provision for auto updates for the R70.x series. The only way to update IPS protection is either click on Online Update and do it real-time …



Visio stencils for Cisco, Juniper, Fortinet, Checkpoint, Avaya

Some links to download Microsoft Visio stencils of the most popular vendors. Juniper Cisco Avaya BlueCoat Fortinet Dell Requires registration Checkpoint happen not to have official stencils set, only Nokia appliances stuff can be found. So someone volunteered and using icons/press releases/PowerPoint presentations done by the Checkpoint turned …



Where do I download the Checkpoint Splat/Gaia image

The answer is surprisingly simple – at the Checkpoint.com . On the home page there is a link to download their products Try Our Products (SPLAT, SmartDefense, Endpoint). You need a free General account in UserCenter, then you fill general questions form and get a link to download the real production …



8 Things to do before opening ticket with Checkpoint

I’ve been doing Checkpoint quite a lot, actually for years now. And this inevitably involves communicating with the Checkpoint Technical Assistance Centre (TAC) . And while you can easily come up with impression that it is pretty bad (look around at cpug.org for heated flames about that), my view …



Change IP address on the interface without losing the connection

I happen from time to time to configure from scratch some Checkpoint UTM/Open Server that is thousand miles away. And from experience the best way to do it is when you have out-of-band fast access to the firewall. Of course not always such well-organized beforehand set up is available …