Check Point trap me all the time because of Proxy ARP, for some reason after install a policy on a gateway the NAT didn’t come up AGAIN! After do a capture i realized what could be the problem (too many arp requests) Capturing traffic [Expert@FW-GAIA:0]# tcpdump -i eth0 host 200.0.0.102 tcpdump: verbose output suppressed, use … Read more
You installed Check Point Endpoint Security Agent R80 by mistake and now you can’t uninstall it because of the mysterious password you didn’t type? So try secret Keep calm and eat a cookie!
Check point bring Security Gateways to the heart of VMware NSX, this will provide: Scalable micro-segmentation Context-aware security policy Ubiquitous security enforcement Security automation and orchestration Comprehensive control and visibility Documentation vSEC Controller R77.30 and vSEC Gateway R77.20VSEC Release Notes vSEC Controller R77.30 and vSEC Gateway R77.20VSEC Administration Guide References: Check Point vSEC … Read more
Since i achieved my Check Point CCSA i´ve decided to go to next level which means CCSE. I used old CBT Nuggets for R65/R70 , Student/Lab guide for R77, and also the Study guide provided by Check Point. I also read a few SKs to help to understand concepts and Blades which i’ve never touched … Read more
If you have an User Center account, you can now download the CPX 2015 Presentations that were presented at CPX this year.
I´ve been working for a long time with Check Point but i did not take any exam, but this was in my objectives for a long time…. So i decided about 1 month ago to start studying for this and was not hard to be honest. The funny thing on Check Point is every Major … Read more
Após alguma pesquisa a Check Point não é muito clara neste tema nas plataformas mais recentes. Este “Order of Operations” aplica-se ao FireWall-1 , e eventualmente ás novas plataformas. Ligações estabelecidas são permitidas desde que estejam listados nas tabelas de estado e são aceites NATED conforme necessário. Para novas conexões, o FireWall-1 segue esta ordem … Read more
Por vezes torna-se difícil encontrar Stencils de determinados Fabricantes, alguém (Fireverse) teve a brilhante ideia de juntar todos os “bonecos” nos documentos que a Checkpoint disponibiliza para os Empregados, Parceiros e clientes e disponibilizar ao público em geral. Curioso que até ao momento não existe nada Oficial. Update 30 Outubro 2014 Foram adicionados mais alguns … Read more
Os comandos na CheckPoint geralmente começam com cp (general), fw (firewall), e fwm (management). CP, FW & FWM cphaprob stat List cluster status cphaprob -a if List status of interfaces cphaprob syncstat <span “>shows the sync status cphaprob list Shows a status in list form cphastart/stop Stops clustering on the specfic node cp_conf sic SIC … Read more
Após compilar mais umas regras na Checkpoint NGX R60 deparei-me com o erro que deu origem ao título deste artigo. Os objectos/regras não gostam (English only) de caracteres especiais, ou seja, acentos. Após removê-los das novas regras e fazer o deploy o problema já era :)