Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [checkpoint]

For questions about or involving Check Point Firewall solutions.

0
votes
1answer
27 views

Impact of disabling ssl network extender on checkpoint

I have a broad question, that i'm hoping you can guys help out with. I have a checkpoint firewall, that has the option to use ssl network extender checked in UI under VPN clients. I've been asked by ...
1
vote
1answer
153 views

SNMP Get routes on Checkpoint returns integer value for IPADDRESS field

I'm trying to execute SNMP-Get request on Checkpoint to get IP address of a route with OID .1.3.6.1.4.1.2620.1.6.51.1.2. Here we can see that syntax of this field is SYNTAX IpAddress. However, when I ...
1
vote
1answer
2k views

Check Point Firewall: “fw monitor” command to exclude certain traffic

In tcpdump, I can use not if I want to exclude it from the standard output. tcpdump -i eth0 not port 22 Is it possible to accomplish the same task in fw monitor (Check Point firewall)? I've been ...
1
vote
1answer
395 views

Port-selective transparent forwarding with routing?

I'm trying to sanity check my lack of understanding of a colleague's network planning exercise. It doesn't make sense to me, but maybe I'm missing something. My general networking knowledge isn't bad, ...
1
vote
1answer
185 views

Will a cisco Router relay NTP information to a Checkpoint firewall?

so i have a checkpoint firewall and a cisco router , cisco router clock os synchronized via a public NTP server, as we know, a route which a ntp client can also relay the ntp information, will it ...
1
vote
0answers
117 views

Putty pscp Illegal file descriptor format error [closed]

i am trying to backup my checkpoint using putty pscp with the cmd: pscp -r admin@<ip address>:/var/log/CPbackup/backups/R77/<file_name.tgz> D:\test_location_on_windows I get the error: ...
4
votes
2answers
237 views

Identifying missing TCP Packet

I would like some help in identifying a missing Packet in a TCP Stream. My Scenario: I have an Application Layer Firewall where I can filter specific Web sites and Applications. When I access a ...
1
vote
0answers
951 views

IPSEC VPN between Cisco IOS and Checkpoint SA failure, one way works

I am trying to hook up a VPN between us and a customer. Customer has a Checkpoint FW (not sure which version), I have a 2811. Symptom: The tunnel (session) comes up, I can ping through, other side ...
2
votes
1answer
3k views

Checkpoint equivalent of Cisco ASA packet-tracer?

Is there an equivalent command/function either from CLI or SmartDashboard similar to the ASA 'packet-tracer' command? For those unfamiliar with 'packet-tracer' - in the ASA CLI we are able to test ...
3
votes
1answer
5k views

NAT and ACL order - Cisco ASA, Palo Alto, Checkpoint

I've recently begun working with firewalls (Different brands) and what really confuses me is the order the different firewalls check the ACL and NAT rules. For instance, allow HTTP traffic from the ...
5
votes
1answer
417 views

Monitor Throughput on Nokia IP560

I am planning on replacing our pair of Noka IP560s running CheckPoint. I need to size the replacement accurately so i need to see the maximum throughput the Firewall has ever had to deal with. I can ...
9
votes
2answers
12k views

Find idle connections in Check Point firewall

I have a firewall, where I have to lower the TCP session timeout from 24h to 1h. Before I do that, I'm trying to determine if this will break any applications, i.e applications that have sessions that ...
4
votes
1answer
432 views

CheckPoint SmartDashboard report file (mht) to csv file

Does anyone knows a way to export the CheckPoint SmartDashboard Report (mht file) to one or multiple csv file(s)?