Check Point Links & Tools

Blogs

• https://yurisk.info/category/checkpoint-ngngx/index.html

• https://yurisk.info/category/checkpoint-ngngx.html

• https://checkpoint.engineer/
• https://checkpointengineer.com/

Architecture

• Ports Used for Communication by Various Check Point Modules
• R80.x Security Gateway Architecture (Logical Packet Flow)

Operating

• Domain Objects (FQDN) - deep dive
  • https://community.checkpoint.com/docs/DOC-3476-domain-objects-fqdn-an-unofficial-atrg
• GAIA REST-API
  • https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk143612

Troubleshooting

• Connectivity issues after policy install (sk103598)
• GAIA Automated health check (sk121447)

Tools

• Diagnosticsview - CPInfo Viewer

CLI

• Top Check Point CLI commands
  • https://community.checkpoint.com/thread/5319-my-top-3-check-point-cli-commands
  • https://www.51sec.org/2015/10/advanced-checkpoint-gaia-cli-commands-tips-and-tricks/
• Common Check Point Commands (ccc) - Bash Script with all useful commands about check point
  • https://community.checkpoint.com/docs/DOC-2214-common-check-point-commands-ccc
• fw ctl zdebug commands
  • https://community.checkpoint.com/docs/DOC-2982-fw-ctl-zdebug-helpful-command-combinations
• fw monitor cheat sheet
  • http://www.roesen.org/files/fw_monitor.pdf
  • https://community.checkpoint.com/docs/DOC-3475-r8020-update-cheat-sheet-fw-monitor

Certification

• CCSM Certification R80 Overview

IPS

• IPS Protections in Detect (Staging)
• R80 Threat Prevention Best Practice
• R80.10 IPS Best Practice (PDF)