Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [checkpoint]

For questions about or involving Check Point Firewall solutions.

Filter by
Sorted by
Tagged with
0 votes
0 answers
108 views

Firewall sending ARP requests for 8.8.8.8

We have a checkpoint firewall that is having Internet issues today. When I did a packet capture on the interface going into the ISP router I can see ARP messages for the google DNS servers. Thats not ...
The Footsie's user avatar
0 votes
0 answers
28 views

Is it possible to create an IPS rule to Checkpoint 5200 PB-20 Firewall for Mysql packets

Is it possible to create an IPS rule to Checkpoint 5200 PB-20 Firewall that assesses the content from incoming packets for Mysql database server (port 3306)? If the packet is according to real Mysql ...
user3637971's user avatar
1 vote
1 answer
1k views

Checkpoint Firewall using wrong Source IP when establishing a VPN

I have a checkpoint VSX environment running r81 and I have a DMZ firewall that has two external interfaces. One that goes to the Internet and one that goes to a 10.0.0.0/8 network that connects to ...
The Footsie's user avatar
0 votes
1 answer
60 views

Changing Checkpoint Trusted Client list from AnyHost

I have been tasked with locking down our Checkpoint smart console R81 access as currently the Trusted Client list is set to any host and nothing else. I have experience of adding and removing hosts ...
The Footsie's user avatar
2 votes
1 answer
209 views

Change file permissions for Checkpoint r80.30 so scpuser can download file

Using checkpoint r80.30, how can I change the permissions of a file in the /var/log/ folder so that I can download it to my PC using a scpuser account? I have connected to the firewall using the ...
The Footsie's user avatar
1 vote
0 answers
791 views

SOLVED: Check Point firewall log format through syslog [closed]

I receive logs from a series of Check Point firewalls that I don't manage and they are very thorough, containing every possible information about the communication. They're also formatted like field:&...
mfloris's user avatar
  • 195
1 vote
0 answers
97 views

Chckpoint Remote Access VPN Multiple ISP external interface [closed]

I'm in a situation where I have to suggest the best solution when client has two ISP connected to a checkpoint firewall cluster. AFAIK, we cannot activate or make use of two external interfaces for ...
Anoop Nair's user avatar
0 votes
1 answer
935 views

Checkpoint beginner

My company got few CP firewalls, I have to test them and I never had a chance to work on them. Can anyone explane me differences between CP smart dashboard and CP smart console? Is that software ...
John's user avatar
  • 812
0 votes
1 answer
492 views

IPsec VPN route in Checkpoint

I have created a ipsec VPN from site A (Cisco) to Site B (checkpoint R77.20). At site B, i have a static 1-1 NAT applied: ipx --ipy Tunnel is live and connection up; I can telnet my site B system ...
Subin Thomas's user avatar
0 votes
1 answer
456 views

Impact of disabling ssl network extender on checkpoint

I have a broad question, that i'm hoping you can guys help out with. I have a checkpoint firewall, that has the option to use ssl network extender checked in UI under VPN clients. I've been asked by ...
justAnotherNoob99's user avatar
1 vote
1 answer
227 views

SNMP Get routes on Checkpoint returns integer value for IPADDRESS field

I'm trying to execute SNMP-Get request on Checkpoint to get IP address of a route with OID .1.3.6.1.4.1.2620.1.6.51.1.2. Here we can see that syntax of this field is SYNTAX IpAddress. However, when I ...
Sergii Bishyr's user avatar
1 vote
1 answer
3k views

Check Point Firewall: "fw monitor" command to exclude certain traffic

In tcpdump, I can use not if I want to exclude it from the standard output. tcpdump -i eth0 not port 22 Is it possible to accomplish the same task in fw monitor (Check Point firewall)? I've been ...
Charlotte Russell's user avatar
1 vote
1 answer
550 views

Port-selective transparent forwarding with routing?

I'm trying to sanity check my lack of understanding of a colleague's network planning exercise. It doesn't make sense to me, but maybe I'm missing something. My general networking knowledge isn't bad, ...
Kantban's user avatar
  • 11
1 vote
1 answer
336 views

Will a cisco Router relay NTP information to a Checkpoint firewall?

so i have a checkpoint firewall and a cisco router , cisco router clock os synchronized via a public NTP server, as we know, a route which a ntp client can also relay the ntp information, will it ...
user27170's user avatar
1 vote
0 answers
242 views

Putty pscp Illegal file descriptor format error [closed]

i am trying to backup my checkpoint using putty pscp with the cmd: pscp -r admin@<ip address>:/var/log/CPbackup/backups/R77/<file_name.tgz> D:\test_location_on_windows I get the error: ...
allwynmasc's user avatar
5 votes
2 answers
328 views

Identifying missing TCP Packet

I would like some help in identifying a missing Packet in a TCP Stream. My Scenario: I have an Application Layer Firewall where I can filter specific Web sites and Applications. When I access a ...
Thieron's user avatar
  • 446
2 votes
0 answers
1k views

IPSEC VPN between Cisco IOS and Checkpoint SA failure, one way works [closed]

I am trying to hook up a VPN between us and a customer. Customer has a Checkpoint FW (not sure which version), I have a 2811. Symptom: The tunnel (session) comes up, I can ping through, other side ...
Gabor Vincze's user avatar
3 votes
2 answers
5k views

Checkpoint equivalent of Cisco ASA packet-tracer?

Is there an equivalent command/function either from CLI or SmartDashboard similar to the ASA 'packet-tracer' command? For those unfamiliar with 'packet-tracer' - in the ASA CLI we are able to test ...
A L's user avatar
  • 3,310
4 votes
2 answers
6k views

NAT and ACL order - Cisco ASA, Palo Alto, Checkpoint

I've recently begun working with firewalls (Different brands) and what really confuses me is the order the different firewalls check the ACL and NAT rules. For instance, allow HTTP traffic from the ...
Birdman's user avatar
  • 279
5 votes
1 answer
436 views

Monitor Throughput on Nokia IP560

I am planning on replacing our pair of Noka IP560s running CheckPoint. I need to size the replacement accurately so i need to see the maximum throughput the Firewall has ever had to deal with. I can ...
raffialli's user avatar
9 votes
2 answers
13k views

Find idle connections in Check Point firewall

I have a firewall, where I have to lower the TCP session timeout from 24h to 1h. Before I do that, I'm trying to determine if this will break any applications, i.e applications that have sessions that ...
sk0yern's user avatar
  • 195
4 votes
1 answer
478 views

CheckPoint SmartDashboard report file (mht) to csv file

Does anyone knows a way to export the CheckPoint SmartDashboard Report (mht file) to one or multiple csv file(s)?
Gu Noi's user avatar
  • 81