Search Results

Partition Resize Since R77.30 lvm_manager is included in Gaia OS and can be used to resize logical volumes on the system. Check Managing partition sizes via LVM manager on Gaia OS (sk95566) for more information. Partition Sizes when installing Gaia OS When...

In R77.30 you could use command line parameters to specify username/password like this: FwPolicy.exe connect %Hostname% %Username% Since R80.10 you need to do the following: SmartConsole.exe -p SmartConsole.LoginParams Here is the SmartConsole.LoginParams ...

In R80.10 you can jump directly to a rule number or a rule-UID. With Ctrl-G you get the following: You can copy the UID from a rule: Or search for an rule-UID: Perfect to use in documentations, just use the rule-UID or sometimes I also use the <FW...

Howto clear disconnected sessions If several SmartConsole disconnected (stale) sessions that cannot be discarded, see this here: https://community.checkpoint.com/t5/General-Management-Topics/clear-disconnected-sessions/td-p/33027 Postgresql Queries View p...

Check Point and SNMP Monitoring for a Firewall is important, you need to make sure that you see the baseline of your environment and that you can see when some value will go up too high. The following guide is showing some of the most used SNMP OID for monit...

Preface Before R80.x in a MDM (Multi Domain Management) you could do a search where an object is used in all the CMA's.Until now (R80.30) this feature is not included in SmartConsole anymore. Script solution https://github.com/WadesWeaponShed/Global-IP-Sea...

Problem Policy push fails with the following error: Policy installation failed on gateway. If the problem persists contact Check Point support (Error code: 2000232) Cause The user has configured too many policy layers in the rulebase (a layer is either an O...

If you need to view Logs over the Web in Check Point you can use SmartView. Available since R80 but not enabled per default. In R80.10 it is enabled per default and you can access it with your SmartConsole Credentials. It looks like this in the Browser: A...

Problem description At the customer site we have a rule which allows a WLAN Controller to connect to the RADIUS Server in another network.After installing the rules, the UDP connections were rematched because it is the needed global Setting on this Firewall. ...

If you need to apply an ALG (Application level gateway) on SQLNet be careful and check the following: SQL*Net (a.k.a Oracle TNS) and firewalls… Most vendor’s firewalls have a SQL ALG that handles SQL*Net traffic.They listen on TCP port 1521. SQL*Net is base...

If you need a list of interfaces and the actual speed and duplex settings use this: # ifconfig -a | grep encap | awk '{print $1}' | grep -v lo | grep -v bond | grep -v ":" \ | grep -v ^lo | xargs -I % sh -c 'ethtool %; ethtool -i %' | grep '^driver\|Speed\|D...

Introduction The following is a collection of troubleshooting I need to do with Check Point Threat Extraction R80.10.I used the Technical Reference Guide (ATRG) here: sk114807 Workflow in MTA mode A PostFix server receives and handles the emails.  Emails...

Link https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/GAIA-Easy-execute-CLI-commands-on-all-gateways-simultaneously/m-p/50883  

Check Point ExportImportPolicyPackage tool enables you to export a policy package from a Management database to a .tar.gz file, which can then be imported into any other Management database. The tool is supported for version R80.10 and above. This tool can be...

This command lets you initiate a manual cluster failover (see sk55081). Syntax Shell Command Gaia Clish set cluster member admin {down | up} Expert mode clusterXL_admin {down | up} Example [Expert@Me...

Problem To do administration of IPS and other modules of the check point firewall, you often need to check logs with smartlog queries.These queries are saved then to favorites for later use. Migration To migrate these queries to a new user account on the ...

Solution Check Point "Log Exporter" is an easy and secure method for exporting Check Point logs over the syslog protocol. It is integrated in Version R80.20 or higher. Example Basic Log Export to another syslog Server cp_log_export add name SyslogToSplunk ...

Blogs https://yurisk.info/category/checkpoint-ngngx.html https://checkpoint.engineer/ https://checkpointengineer.com/ Architecture Ports Used for Communication by Various Check Point Modules R80.x Security Gateway Architecture (Logical Packet Flow)...

VPN Problems Links & Infos IKEv2 Internet Key Exchange Protocol Version 2 (IKEv2)https://tools.ietf.org/html/rfc5996 Check Point Probleme mit IKEv2 Site to Site using IKEv2 fails with "None of the traffic selectors match the conection"https://support.chec...

Generic Queries Research SmartLog Query Search for E-Mail SubjectNote: Search without quotation marks and wildcard works for email_subject email_subject:*TEXT* Application Control Proxy Log blade:"Application Control" AND appi_name:"Web Sur...