Questions tagged [checkpoint]

For questions about or involving Check Point Firewall solutions.

Filter by
Sorted by
Tagged with
0
votes
1answer
41 views

Checkpoint beginner

My company got few CP firewalls, I have to test them and I never had a chance to work on them. Can anyone explane me differences between CP smart dashboard and CP smart console? Is that software ...
0
votes
0answers
12 views

IPsec VPN route in Checkpoint

I have created a ipsec VPN from site A (Cisco) to Site B (checkpoint R77.20). At site B, i have a static 1-1 NAT applied: ipx --ipy Tunnel is live and connection up; I can telnet my site B system ...
0
votes
0answers
23 views

What is BFM in reference to checkpoint firewall?

Request some one to please expand the term BFM when used in reference to checkpoint firewall. The same appears multiple times in documentation and forums but there is no explanation of what it is. ...
0
votes
1answer
64 views

Impact of disabling ssl network extender on checkpoint

I have a broad question, that i'm hoping you can guys help out with. I have a checkpoint firewall, that has the option to use ssl network extender checked in UI under VPN clients. I've been asked by ...
1
vote
1answer
186 views

SNMP Get routes on Checkpoint returns integer value for IPADDRESS field

I'm trying to execute SNMP-Get request on Checkpoint to get IP address of a route with OID .1.3.6.1.4.1.2620.1.6.51.1.2. Here we can see that syntax of this field is SYNTAX IpAddress. However, when I ...
1
vote
1answer
2k views

Check Point Firewall: “fw monitor” command to exclude certain traffic

In tcpdump, I can use not if I want to exclude it from the standard output. tcpdump -i eth0 not port 22 Is it possible to accomplish the same task in fw monitor (Check Point firewall)? I've been ...
1
vote
1answer
427 views

Port-selective transparent forwarding with routing?

I'm trying to sanity check my lack of understanding of a colleague's network planning exercise. It doesn't make sense to me, but maybe I'm missing something. My general networking knowledge isn't bad, ...
1
vote
1answer
202 views

Will a cisco Router relay NTP information to a Checkpoint firewall?

so i have a checkpoint firewall and a cisco router , cisco router clock os synchronized via a public NTP server, as we know, a route which a ntp client can also relay the ntp information, will it ...
1
vote
0answers
127 views

Putty pscp Illegal file descriptor format error [closed]

i am trying to backup my checkpoint using putty pscp with the cmd: pscp -r admin@<ip address>:/var/log/CPbackup/backups/R77/<file_name.tgz> D:\test_location_on_windows I get the error: ...
5
votes
2answers
251 views

Identifying missing TCP Packet

I would like some help in identifying a missing Packet in a TCP Stream. My Scenario: I have an Application Layer Firewall where I can filter specific Web sites and Applications. When I access a ...
2
votes
0answers
994 views

IPSEC VPN between Cisco IOS and Checkpoint SA failure, one way works

I am trying to hook up a VPN between us and a customer. Customer has a Checkpoint FW (not sure which version), I have a 2811. Symptom: The tunnel (session) comes up, I can ping through, other side ...
3
votes
1answer
3k views

Checkpoint equivalent of Cisco ASA packet-tracer?

Is there an equivalent command/function either from CLI or SmartDashboard similar to the ASA 'packet-tracer' command? For those unfamiliar with 'packet-tracer' - in the ASA CLI we are able to test ...
3
votes
1answer
5k views

NAT and ACL order - Cisco ASA, Palo Alto, Checkpoint

I've recently begun working with firewalls (Different brands) and what really confuses me is the order the different firewalls check the ACL and NAT rules. For instance, allow HTTP traffic from the ...
5
votes
1answer
420 views

Monitor Throughput on Nokia IP560

I am planning on replacing our pair of Noka IP560s running CheckPoint. I need to size the replacement accurately so i need to see the maximum throughput the Firewall has ever had to deal with. I can ...
9
votes
2answers
12k views

Find idle connections in Check Point firewall

I have a firewall, where I have to lower the TCP session timeout from 24h to 1h. Before I do that, I'm trying to determine if this will break any applications, i.e applications that have sessions that ...
4
votes
1answer
439 views

CheckPoint SmartDashboard report file (mht) to csv file

Does anyone knows a way to export the CheckPoint SmartDashboard Report (mht file) to one or multiple csv file(s)?