Questions tagged [checkpoint]
network security components including Firewall
64
questions
0
votes
0
answers
178
views
Strongswan VPN with Checkpoint stuck on connecting
I am new to strongswan and linux so i'm trying to setup a vpn connection between a linux firewall cluster and a checkpoint gateway.
So this is my node list and resources:
root@Deb-FW-C1:/etc# crm ...
- 1
0
votes
0
answers
240
views
Using strongswan to connect a checkpoint vpn gateway using Ikev1 and xauth-hybrid
I try to connect to a r81.10 gateway using a linux distribution with strongswan.
Gateway accepts user:password only. Tested with Windows Version of Checkpoint Endpoint Software. Have to use ikev1.
The ...
1
vote
0
answers
444
views
Configuring Checkpoint VPN MacOS without Checkpoint client
Is there a way to connect to a Checkpoint VPN on a Mac without installing their client software?
I'm on OSX Ventura 13.0.1 with an M2 chipset. Their latest client E86.50 doesn't support Apple Silicon, ...
- 131
0
votes
0
answers
22
views
Hyper-V - Expanded Data Volume with Checkpoints - Options?
I was an idiot and expanded my data drive (does not contain the OS) on a VM that had checkpoints in place from a few days prior.
The server was shutdown at the time and came back online just fine. The ...
- 1
0
votes
0
answers
8
views
Checkpoint & ASA visabilty
We are using both checkpoints fw and Ciscos ASA, I'm looking for a tool, preferably with web gui, to allow our developers see if the connection was dropped either in the ASA or in the checkpoint.
One ...
- 1
0
votes
1
answer
59
views
When you Checkpoint a VM, at what point is the state saved?
In Hyper-V, if you create a Standard Checkpoint on a VM, is the disk and memory state frozen when you start creating the checkpoint, or when the checkpoint has finished saving, or at some other point ...
- 802
0
votes
0
answers
2k
views
Hyper-V did not merge .avhdx after delete checkpoint
I have a Windows 10 laptop that has a Hyper-V host login and that has a VM that I use to native boot to a vhdx file. I hardly ever log into the Hyper-V host but did today to backup the vhdx file and ...
- 121
1
vote
0
answers
117
views
SIP traffic and firewall rules
We have Cisco Expressway-Edge devices handling videoconferencing traffic with the outside world. This all goes through a Checkpoint firewall. The intention is that the inside endpoints can initiate ...
- 11
0
votes
0
answers
57
views
Using a VPN inside a VM over SOCKS
At work my PC is ubuntu based, and we are migrating to a VPN that only comes with a client for windows based machines. It seems almost impossible to hack the client to work on Linux (or it will ...
- 1
2
votes
1
answer
2k
views
Checkpoint Hide NAT feature and dynamic source port selection
Checkpoint firewall have two NAT modes: Static NAT (1-to-1 internal IP to external IP) and Hide NAT, which is called "overload" in the Cisco and so on.
It is not being said in clear, but it seems ...
- 9,994
0
votes
1
answer
1k
views
Check Point: ISP Redundancy Link Interface Cannot Be Created
While setting up ISP Redundancy on a Check Point cluster I ran into an issue preventing me from proceeding with my configuration. I was eventually able to resolve this and felt that I would share ...
- 53
0
votes
3
answers
17k
views
Azure VPN Site-to-site connected but host not reachable
Using Azure gateway VPN I created a site to site connection with another vpn device (checkpoint) over which I have no control (customer endpoint).
I created the connection, using their public ip, ...
- 155
2
votes
1
answer
355
views
Win Server 2016 Hyper-V checkpoints - using them in production
Sysadmins have known for a long time that snapshots, or as they are now called, "Checkpoints" are excellent for dev / testing, but not suitable for use in production as they require a chain of VHDX ...
- 390
1
vote
0
answers
151
views
Is there a way to tell what process changed a route in Windows 7?
I have a situation where our Windows 7 clients (Windows 10 works ok) are having intermittent connectivity issues when connecting over our Checkpoint Endpoint Connect VPN. The issue manifests itself as ...
- 11
0
votes
0
answers
42
views
Simple 7 computers network - 1 computer is suffering from internet disconnections (but not LAN)
We have a simple office network with the following structure:
DSL Modem -> Checkpoint 620 -> TP-LINK TL-SG1016 -> Ethernet ports around the office -> Computers & Printers. The CP620 also have Wi-...
- 1
0
votes
1
answer
103
views
How to add internal user to one of the rules in Check Point's Mobile Access blade
I want to add an internal user to one of the rules in Check Point's Mobile Access blade.
How can I do that?
- 141
1
vote
1
answer
959
views
Hyper-V 2012 R2 windows backup lingering checkpoints
I have a Windows 2012 R2 Hyper-V server that has two virtual machines running.
I have Windows backup configured to do a full bare metal backup of the Hyper-V server to USB disk.
Every few weeks the ...
- 150
0
votes
1
answer
167
views
Checkpoint - Automatic NAT
I have a checkpoint firewall (R75, Splat) that has a server published with Automatic NAT enabled, however I'm unable to connect to external websites.
Traffic leaves the firewall ok but the Internet ...
- 247
4
votes
0
answers
1k
views
Windows - Log services access to certificate store
I have a software which run as a service (Checkpoint Identity Awareness) which connects to a server and verifies its identity (actually a checkpoint firewall) by checking its certificate, like any ...
- 141
1
vote
0
answers
935
views
Fresh install of CheckPoint Gaia r77 on VMware Workstation, no internet?
Hi I'm a complete noob to CP, Gaia and Firewalls.
I installed Gaia on VMware Workstation 12. I added 2 NIC on it:
First NIC is 10.34.x.x Custom network and I seem to be able to manage Gaia through a ...
- 111
0
votes
1
answer
104
views
Nexus 1000v Port Channel to Virtual Machine
Is it possible to setup a Port-Channel between a Nexus 1000v Switch and a ESX Virtual Machine?
Context: I am running a Checkpoint Firewall cluster as Virtual Machines on an ESX server. I want to ...
- 1
2
votes
1
answer
40k
views
How to find Check Point firewall version from command line
On Check Point firewall's command line, how can I find its version?
Major version, minor version and optionally build number.
- 141
0
votes
1
answer
1k
views
Setup a very Basic DMZ for WordPress
We are thinking of switching our corporate website from externally hosted and designed, to an internal WordPress server. This is so we can maintain direct control, as well as run our own traffic ...
- 486
0
votes
0
answers
2k
views
Will the Linux Open VPNC Client connect to checkpoint or nortel VPN gateways?
Site: http://www.oucs.ox.ac.uk/network/vpn/linux-solaris/index.xml?ID=VPNC
What is open VPNC:
VPNC is an open-source VPN client for Linux and other Unix systems which is compatible with the OUCS VPN ...
- 601
0
votes
1
answer
3k
views
VPN Between Checkpoint R75.20 and AWS VPC
I have been trying for a long time now to configure a site-to-site VPN connection between Amazon and a Checkpoint R75.20 (previously i tried with Azure) unsuccessfully. I have tried everything and ...
- 21
1
vote
1
answer
110
views
Opening in Checkpoint firewall
I have a server with address 80.39.X.X that I want to give access to another server range in my network: 10.1.16.0/24.
They are both in my network, behind a Checkpoint firewall.
When I try to reach ...
- 11
0
votes
1
answer
2k
views
Memory usage on my firewall [duplicate]
I have a memory usage problem with my Checkpoint Firewall (it's a physical firewall).
On my monitoring software OPManager I can see that 94% of my memory is used.
In SSH, when i enter this command : ...
- 495
1
vote
0
answers
738
views
CheckPoint Firewall R71: Is it possible to reserve an IP for a specific MAC address on a VPN session?
My Checkpoint firewall is configured to allow users to open the GUI (Smart Dashboard) only if their IP is on the allowed list.
Whenever I work from home (I use the CheckPoint SNX client on an Ubuntu ...
- 10.6k
0
votes
1
answer
992
views
CheckPoint/Amazon VPC VPN tunnel working inconsistently
First time poster, so please be gentle and correct me if there's Server Fault etiquette I'm missing.
We have two CheckPoint edge devices at sites A & B, independently managed, connecting to two ...
user166357
1
vote
1
answer
386
views
Checkpoint - Wifi Bridge mode kills round trip requests?
I'm fairly sure this is either a NAT or routing question, but it's one that continually has me stumped.
The hardware is a Checkpoint Safe@Office firewall. The default mode of operation is that wired ...
- 283
1
vote
0
answers
722
views
Checkpoint NGX FW1 Routing Between Networks
We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and we'...
- 415
2
votes
3
answers
4k
views
Tracking changes to firewall configs?
Myself and one other indivdual will be taking over some of the daily firewall management duties soon and I'm looking for a way to track changes on our firewall configurations for auditing purposes and ...
- 790
7
votes
1
answer
23k
views
Checkpoint VPN on Linux
I need to setup a Checkpoint VPN client with a customer who gave me these settings:
Authentication Type: P12 certificate
Password: *****
Peer Site: IP_ADDRESS
They tell me the VPN server is:
IPSO 6....
- 1,134
0
votes
1
answer
167
views
Identify Deprecated Rules on Checkpoint Firewall
I've been asked to find the deprecated rules among the thousands of rules in our Checkpoint firewall.
I could do it by writing a perl program to analyze the log and lists of objects & rules, but ...
- 11
1
vote
1
answer
236
views
Ideal VPN setup for multiplatform and geo distributed network of servers and clients
As per subject. To give you an idea of what type of devices and client OSes.
Servers/network devices: Windows, Linux servers; Juniper, Cisco, Checkpoint Routers/Firewalls
Clients: Windows, Linux, ...
- 1,818
3
votes
0
answers
969
views
Can I replace CheckPoint's SSL Network Extender (client) with some vanilla linux software?
I used to run CheckPoint's SSL Network Extender to connect to a customer's network, but it looks like 64bit support for Linux is nowhere in sight. Could I use something else to connect, e.g. OpenVPN?
- 536
2
votes
1
answer
383
views
Will a Checkpoint Safe@Office 500WP Respond to Site to Site VPN (IPSec) on WAN2?
Pretty simple - if I have two WANs, will the site-to-site VPN work if I specify the WAN2 IP address? (It currently works with the WAN1 IP.)
- 3,250
1
vote
2
answers
6k
views
Can't ping gateway once VPN established
I have two servers:
Checkpoint Safe@Office 500 with ip x.x.x.x and local network a.a.a.a/24
Cisco ASA5505 with ip y.y.y.y and local network b.b.b.b/28
Before setting up a vpn I was able to ping y.y....
- 325
1
vote
2
answers
2k
views
Checkpoint R75 Security Gateway without default route
I've set up a virtual lab network in vmware with two networks. vmnet2 (192.168.100.0/24) and vmnet3 (192.168.200.0/24).
My R75 is having the ip addresses 192.168.100.1 and 192.168.200.1, and is the ...
2
votes
2
answers
3k
views
L2TP VPN routing issue with iphone/ipad
I am able to connect to our company's VPN with L2TP on the iphone and ipad, however, I can only get to certain resources in our company network but not others.
After looking at the iOS device logs ...
- 3,934
0
votes
1
answer
14k
views
VPN from ASA5505-Checkpoint failing after one hour
I have an IPsec site-site VPN set up and working, however I'm having problems once the connection has been established for over an hour. After an hour ASDM still thinks the VPN is connected and the ...
- 325
1
vote
2
answers
150
views
Strange Firewall Issue
We have put a web server in place on a network, it was recently moved from a testing environment in another subnet to a different office. Now that we have the server in place, we can access it via its ...
- 482
2
votes
1
answer
1k
views
SQL Server 2008 process list - Is this normal?
I'm very new to SQL Server, and just wondered if anyone could tell me if this process list is normal.
Wait Time | Last Wait Type | dbid
55372252 | ONDEMAND_TASK_QUEUE | 1
55371504 | ...
- 181
1
vote
1
answer
834
views
checkpoint utm-1 edge concurrent users
I am considering to buy a UTM-1 firewall. However, I didnt get exactly what concurrent users mean. There are three models for Concurrent Users 16/32 or Unlimited. What does this mean ? How is ...
- 157
0
votes
2
answers
6k
views
CheckPoint Endpoint Security VPN client co-existing with Windows VPN
Hey guys, I work as a consultant for a firm with a Checkpoint firewall. I have downloaded and installed the Checkpoint Endpoint Security VPN client. During the installation, I answered no to any ...
- 734
0
votes
1
answer
3k
views
Checkpoint VPN-1 R60 and Windows 7 64 Bit Client
As per my knowledge of checkpoint VPN-1. My company is using checkpoint VPN-1 R 60 ( I guess as I dont know how to check server version) Firewall(VPN Server). Now the problem is that I installed ...
- 195
1
vote
2
answers
536
views
Checkpoint - Routing into the tunnel
I have a simple question for my checkpoint infrastructure.
Do i have to route a net which i wanna access over a configured firewall VPN Tunnel.
Explanation:
I have two firewalls connected over a ...
- 593
2
votes
2
answers
3k
views
How to control/check CheckPoint rules changes (and another System events)
I need to check/control all system events on many CheckPoint FW1 - don't misunderstand - not rules triggering, but events such admins log on, rules changes and etc.
I found out that I can make an log ...
- 71
4
votes
3
answers
3k
views
Home workers requiring simultaneous office VPN and local network access
I now have a large number of remote users that are using a Check Point Secure Client VPN connection into the office. These users also need access to network resources attached to their local router/...
- 141
3
votes
3
answers
5k
views
Manual NAT on Checkpoint (Redirect all http requests to a local web server)
We have a proxy server in our internal network and I want to redirect all internet http requests to a web server in local network. It'll be like a Network Billboard that says "No direct connection is ...
