Skip navigation
All Places > About CheckMates > Blog
1 2 3 Previous Next

About CheckMates

32 posts

Check Point is proud to name its CheckMates Member of the Month for January 2018: Gaurav Pandya

 

A network engineer turned security engineer, Gaurav both manages and helps others manage their Check Point firewalls. CheckMates has been a valuable tool for him to learn more and share what he's learned with others.

 

Gaurav, tell us a little about yourself & what you do

I have overall 9 years of IT experience. I started my career as a Network Engineer and then moved into the Security domain – Firewalls (Mainly Check Point) and Proxies. We provide Check Point firewall support for various customers and some of them are managed customers. I'm personally responsible for new implementations, upgrades, and troubleshooting of Check Point firewalls. I also perform configuration and troubleshooting of Cisco and Extreme switches.

 

Tell us a little about your experience with Check Point

I have started to use Check Point from the R65 release on SecurePlatform (SPLAT). I have worked with R70 & R77 versions in SPLAT as well as GAIA. I have done new Implementations and Upgrades for many customers, IPS signature review, and other updates according to customer requirements. I like the new version R80.x, especially the automation capabilities. It has great features with a unified console. I have migrated some customer’s database from R77.30 to R80.10.

 

Do you have a unique deployment of a Check Point product? 

I came across a new requirement of POC of NAT64, which I had not done before. I did it in my LAB and successfully completed a customer POC. I also got support from Dameon Welch Abernathy. See the thread here: IPv6 with Checkpoint R77.30 

 

What do you use the CheckMates platform for? 

Whenever I login to CheckMates, I am learning something new as people are asking questions, doing troubleshooting, and giving tips and tricks which is very helpful. I started to share my thoughts and ask questions which I have faced. It is really great platform!

 

What do you like to do for fun?

In my free time, I play Cricket with my friends and listen to light music, which is relaxing. Sometimes I also read technical books in spare time.

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Highlights from the past week includes:

 

List of different IP addresses to be blocked 

There are many different ways to block a couple hundred thousand IP addresses...without typing them in!

 

How to troubleshoot an app drop with the extended log options 

Great troubleshooting tip here from Tomer Sole

 

Multiple VPN - MEP 

How can I setup a primary and backup S2S VPN tunnels 

Different approaches you can take when you're trying to do multiple VPN paths...depending on whether or not the remote end is Check Point or not.

 

Script for basic configuration capture from bash CLI 

Another great script from Eric Beasley that's useful to document your existing OS configuration.

 

How to test the Management API with the Cloud Demo 

Tomer Sole is on fire with the tips this week, this showing you how to test our R80.x API without having to stand up your own manager to test it!

 

Report for unused objects on R77.30 SMS 

 

While there is an easy way to get this information in R80.10 (See Unused Objects Cleanup), it's a little more challenging in R77.30, but possible, as this thread describes.

 

Policy Installation Stages 

Ever wonder what some of the messages you see during policy installation means?

 

Upcoming Events

If you're coming to CPX360, CheckMates will be there!

Meanwhile, our upcoming TechTalks include:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Highlights from the past couple of week include:

 

Improve AD Query to Limit WMI Service impact

Great tip from Simon Drapeau on how to make ADQuery work a bit better if you can't migrate to Identity Collector just yet.

 

Drive Mapping with Mobile Access SSL VPN

If you want to map user drives using Mobile Access Blade, check out this tip from Gaurav Pandya!

 

Migrating R75 Management Server to New Release 

R75 has been end of life for a while now. If you're still there, this thread will be helpful to get you to a more recent release.

 

Revisions Management in R80.x 

Yes, it works a little differently in R80.x than it did in past releases. This topic keeps coming back up.

Interfaces based Policies to Zone based Policies 

Zone based policies are a new feature in R80.x. Should you convert to them?

 

 

Did You Know...

You can unsubscribe from the periodic emails sent from the community by following the steps here: How to Unsubscribe from Emails from Community 

 

Upcoming Events

If you're coming to CPX360, CheckMates will be there!

Meanwhile, our upcoming TechTalks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Highlights from the past couple of weeks include:

 

Clone System to create hot spare management 

This discusses the process and licenses needed to do this (depending on your target).

 

Blink - Full gateway installation in 5 minutes 

Image appliances complete with Jumbo Hotfixes installed...fast!

 

TechTalk: Migrate to R80.10 and New Years Toast 

This has been a much requested topic that I've covered in local CheckMates Live events, now as a TechTalk you can watch anytime!

 

Threat Emulation blade not communicating 

There's some helpful troubleshooting hints in this thread you should try.

 

About protocol detection 

If you're curious about how we detect applications and protocols, there is some discussion in here.

 

Did You Know...

You can unsubscribe from the periodic emails sent from the community by following the steps here: How to Unsubscribe from Emails from Community 

 

Upcoming Events

We are scheduling CheckMates Live events for 2018...we'll share here once we have some confirmed dates and locations.

Meanwhile, our upcoming TechTalks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

 

"How To..... " Videos 

In a recent survey we did of new users, one of the top requests for more "How To" content. We created a section dedicated to this content on CheckMates! 

 

R80.10 Upgrade 

If you're going to do this with migrate export/import, make sure you're using the right version of the tools to both export and import!

 

Gateway Cluster Hardware Upgrade 

Upgrading software on an existing cluster is one thing, but upgrading the hardware your existing cluster is using is a different story. Some hints and tips in this thread.

 

lvm_manager successor on R80.10 

Even though SKs state this tool isn't supported, it still seems to work, particularly if you bring the appliance into maintenance mode first.

 

What different for Content Awareness and Data Loss Prevention blade 

This thread shows you the differences. Also: Content Awareness is free, whereas DLP is not. 

 

 

Upcoming Events

We are scheduling CheckMates Live events for 2018...we'll share here once we have some confirmed dates and locations.

Meanwhile, our upcoming TechTalks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

 

R80.10 gateway cpu requirements 

Expecting a performance hit by upgrading your gateways to R80.10? In some cases, your performance may be better. It shouldn't be worse, though.

 

Upgrading from SMB to 5k appliance 

Issues with swapping hardware aside, how do you move the policy? It's not that difficult.

 

E80.71 Antimalware client blocking Skype traffic 

There's a new version of the Endpoint client (E80.71 HF1) that should resolve this and similar issues with HTTPS traffic being blocked.

 

R80 Identity awareness Client side logic/server side logic 

Good discussion about Identity Awareness in larger/managed server environments.

 

How to fw unloadlocal in Azure? 

Good tip on getting out of a jam with your vSEC gateways in Microsoft Azure.

 

Upcoming Events

We're planning more CheckMates Live events for 2018, but nothing to announce yet.

Stay tuned!

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Between the three live events Moti Sagey and I were part of this past week along with the TechTalk on Wednesday, it's been quite the week! Here's the highlights:

 

Migrating to R80.10, a CheckMates Live Event! 

If you're curious what a CheckMates event is and/or haven't been able to attend one in your area, here's a sample we recorded in Philadelphia! 

 

Any easy way to roll back to R77.30 from R80.10 

The short answer is no, but there is some other useful information in this thread about the resources you will need to upgrade to R80.10 before you do so. 

 

fw monitor inspection point e or E 

fw monitor in R80.10 has new indicators for when it is displaying pre-encrypted (VPN) and post-encrypted traffic. 

 

TechTalk: Advanced Threat Prevention Best Practices 

If you haven't yet implemented advanced threat prevention in your environment, you don't want to miss this TechTalk given by Nicolas McKerrall!

 

R80.10 Logs and Monitor Pane – Hide Identities within Reports, Views and Logs.

Another how-to on using the logging and reporting features in R80.10.

 

Technical Audit of 4200 Appliance   

If you're auditing a Check Point appliance, what do you look for? Chime in here!

 

Upcoming Events

Our upcoming events in the next few weeks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Check Point is proud to name its CheckMates Member of the Month for December 2017: Hugo van der Kooij

 

An IT support engineer for 20 years, he’s seen versions of FireWall-1 from 3.0b on a variety of platforms to current releases. He still has to do the occasional midnight upgrade and has been known to come up with wild ideas that solve customer problems.

 

I’ve known Hugo for many years as he moderated my FireWall-1 Gurus mailing list during the 2000s. I’m personally grateful for both his past contributions and present contributions to CheckMates!

 

Hugo, tell us a little about yourself & what you do

I work for Qsight IT as support engineer for 20 years now. In that capacity, my first responsibility is to solve problems. But I also do the occasional midnight upgrades as we share those among our team of engineers.

 

Tell us a little about your experience with Check Point

I started off with Check Point version 3.0b on Solaris, mainly because I had been using Linux, Solaris, and various other flavors Unix at that time. I liked iPSO as well as it was a nice mix of hands-on Unix and a reasonably well-designed web interface to do most common tasks. I still like GAIA for that as it will allow people with lesser skills to manage most aspects through the web interface, yet still allow me to dig into whatever I need to find on the system with CLISH or BASH. Over time I have installed Check Point on just about every platform it was supported on. I admit installing it on Windows was only done at gun point ;-)

 

Do you have a unique deployment of a Check Point product? 

Actually, the best trick so far was doing some inspect code with PhoneBoy to speed up email delivery. In the old days, email servers were probing over TCP/113 (IDENT). Until that session was timed-out would hold of the SMTP connection. We added some code to allow IDENT from server to client for 60 seconds whenever an SMTP or FTP connection was allowed. I still like to tinker with stuff like that.

 

What do you use the CheckMates platform for? 

I like CheckMates as a forum to learn of problems others are solving as well as the ability to contribute a wild idea and see what others think of it. Sharing code for tricks and getting feedback is also very useful.

 

What do you like to do for fun?

In my spare time, I like the occasional evening on the couch with my wife. These days, I am also involved in local politics so those moment are treasured. I also happen to hack in the kitchen. Just see what is around and manage to prepare a meal with it. The occasional Apple Pie I make is always appreciated by those I share it with.

 

If you could create any new technology right now, what would it be? 

Actually, I am a bit skeptical if any new technology will actually benefit us. But on the other hand, if I see someone create a technology to use CO to create building materials with far less energy than traditional concrete, I say we could use more of those.

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

 

Check Point Endpoint Security E80.71 is now GA! 

This release provides support for the latest Windows 10 updates and a number of other enhancements.

 

When will we get Central Device Management full capabilities? 

Some features did not make the jump from R77.30 to R80.10. One of these is the SmartProvisioning-type features, which are currently planned in R80.20 (and available as an Early Availability release).

 

VPN issue since R80.10 - Check Point to Fortigate (behind NAT router) 

This thread make help if you've recently upgraded your Check Point gateways to R80.10 and you have a VPN established with a Fortigate.

 

IPS Non Compliant HTTP 

What is this protection and how does this protection interact with other protections? 

 

Extract Policy Target Details across an MDS 

How do you extract a list of Domains, Packages and their installation targets for use within a script? This thread gives you an example!

 

Check Point R80.10 Logs and Monitor Pane – Reporting Functionality 

A short video showing how to use the reporting functionality in R80.10. 

 

Infinity R80.10 "Cool Feature of the Day" - Show changes since last policy installation 

We occasionally post "Cool Feature of the Day" posts such as this to help you discover some of the "cool" features we added to R80.10

 

 

Did You Know...

We do a series of monthly TechTalks?

Every month or so we do a TechTalk on a different topic.

This month's talk, to be given on December 6th, will be on Threat Prevention Best Practices by Nicolas McKerrall where he will show you how to implement Threat Prevention in your environment!

More information about this event is available here: Advanced Threat Prevention Best Practices

You can see the upcoming schedule here: TechTalk Wednesday Schedule

 

Upcoming Events

Our upcoming events in the next few weeks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

 

Multiple cores for medium path traffic 

A little bit of under the covers discussion about how traffic is accelerated securely through the platform.

 

WebUI does not work with Firefox 56 

There seems to be an issue with the latest versions of Firefox that causes issues when accessing various Check Point WebUIs. More details in this thread.

 

SmartMove

SmartMove is our tool to move Cisco and now Juniper gateway configurations to Check Point R80.10. The tool and the source code are available from the above. 

 

What is ClusterXL and VRRP ? 

They are similar technologies, but function somewhat differently. This thread has a good breakdown of the two technologies.

 

Pre-R80.10 dynamic objects from DNS A record lists.. one liner examples 

If you're not on R80.10 yet and you need to allow access to specific hosts by DNS name, here's a way to achieve that.

 

Using DNS FQDN for object names in policy creation 

Meanwhile, if you're using R80.10, you can use Domain Objects using the FQDN mode.

 

Did You Know...

You can browse all content on the site without respect to which forum/space it's in?

Go to https://community.checkpoint.com/content where you can get a complete list.

I actually use this in order to put together this weekly highlight reel.

You can drill down into specific content types and even make custom RSS feeds showing just the content you're interested in!

 

 

Upcoming Events

Our upcoming events in the next few weeks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

 

Working With Postman 

Postman is a great tool to allows you to experiment with APIs, such as the ones we provide as part of Check Point Infinity. Peter Elmer wrote a nice document on how to do exactly that. What do you plan to build with our APIs?

 

Read only / write mode switching in R80 

For those who recently upgraded to R80.10 from R77.x, the inability to switch between Read Only and Read/Write mode is worth noting. It's not as much of an issue as it was in R77.x, though, given multiple users can login with Read/Write mode.

 

Missing Technical Marketing Content for R80.10 suite 

Here's your chance to let us know the kinds of content you're looking for on CheckMates, some of which comes from our Technical Marketing team!

 

SecureXL and URL filtering 

Good discussion about how these two features interact.

 

 

 

Upcoming Events

Our upcoming events in the next few weeks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

 

TechTalk Special Edition: IoTroop -- A New IoT Storm is Coming! 

While we typically aim to do TechTalks on a monthly basis, sometimes we will do one more frequently, particularly for newsworthy items. That's what we did with this TechTalk on IoTroop! View the recording of this talk and the slides using the above link.

 

Exclude CPM Traffic from Implied Rules 

Yes, there's a way to do it, but when VPNs are involved, you probably don't want to do that. Details in the thread.

 

Reverse Proxy Feature of MOB (R80.10) 

There is a new feature added to R80.10 and recent R77.30 Jumbo Hotfix called Reverse Proxy. This thread talks about how it interacts with Mobile Access Blade and other web portals on the Security Gateway.

 

User based access rules in firewall 

This thread discusses how Identity Awareness features in Check Point Security Gateways operates, as well as the new Identity Collector feature added to R80.10.

 

Did You Know...

 

Each month we nominate a member of the month based on their contributions to the community?

We write a brief piece on the user and share it with the wider CheckMates community!

This month it was Vladimir Yakovlev and you can read that piece here: CheckMates Member of the Month for November 2017: Vladimir Yakovlev

Who's next? We'll have to wait and see!

 

Upcoming Events

Our upcoming events in the next few weeks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Check Point is proud to name its CheckMates Member of the Month for November 2017. Please join our volley of applause for Vladimir Yakovlev

 

Vladimir has nearly 20 years of Check Point experience, which began at an institutional broker-dealer where he designed, engineered, and implemented several integrations of their security infrastructure. Currently, he works with EverSec Group, a Check Point VAR which he was previously a customer of.

 

One of my favorite tidbits from Vladimir’s past is his “cloning” of the Nokia IP440 to better learn and tinker with the product. Now, thanks to virtualization and the cloud, it is much easier to stand up test environments. This is how Vladimir is doing it today in addition to helping customers build out their own public and private cloud infrastructures.

 

On behalf of CheckMates, we thank Vladimir for sharing his valuable knowledge with us! We are eager to see the next one to learn from, share with, and inspire other members!

 

Vladimir, tell us a little about yourself & what you do

Formerly, a head of IT for the Institutional broker-dealer G. X. Clarke & Co. I’ve been responsible for design, engineering, and implementation of multiple iterations of their infrastructure for over 18 years.

 

Possibly, due to inherent ancestral expectations that “if things can go wrong, they would”, my designs are always optimized for redundancy, resiliency, and security.

 

As a result, the firm’s infrastructure remained one of the few operational in the Northeast during hurricanes Floyd, Irene and Sandy, Northeast blackout of 2003, as well as during the terrible events of September 11, 2001. In the last 15 years of operation, we had 15 minutes of unplanned downtime.

 

I had the privilege of tutoring and overseeing the final design projects of quite a few very talented interns from Stevens Institute of Technology, who have since graduated and are holding executive positions themselves.

Presently, I am a consultant with primary focus on security controls, POCs, optimization of policies and procedures for large financial institutions or design of the entire physical, virtual, cloud and hybrid infrastructures for SMBs, where Check Point is prominently featured.

 

For the past two years I have enjoyed fruitful collaboration with EverSec Group, a Check Point VAR that I have been a former customer of.

 

Tell us a little about your experience with Check Point

I have been introduced to Check Point in 1998 and was immediately captivated by an entire new world of information about information it let me see and control the flow of. It was not until I’ve cloned the Nokia IP440, built on commodity hardware, that allowed me to tinker with the product.

 

With the release of virtual appliances for VMware, the possibilities for building simulated environments and Proofs of Concepts became truly awesome and I am routinely doing this for my clients and my own experiments.

 

In 2016, I was a lead SE certifying Check Point 15000 and 23000 series of appliances for the Joint Interoperability Test Command of the Department of Defense. For anyone unfamiliar with the process, you pretty much must go over every single feature and capability, and demonstrate the product’s adherence to the strictest security requirements. Even for someone working with Check Point for over a decade, that was an eye-opening experience, as to the breadth of possibilities and the level of forethought that went into design and engineering of this product.

 

Since then, I’ve been helping companies with optimization of their architecture and policies, upgrades and deployments, ranging from simple clusters to sizable MDSM and VSX environments.

 

Now I am increasingly getting involved in cloud and hybrid projects requiring implementation of vSEC. Being fairly fluent in AWS, I am in the process of beefing up my Azure skills to expand my offerings and competency.

 

Do you have a unique deployment of a Check Point product?
I am not sure about this being unique, but have not seen it done elsewhere:

 

For one company on a budget, in order to provide redundancy for their single Management Server, I’ve implemented a virtual Gaia appliance with multiple interfaces. Each of the interfaces was assigned an IP from a network in each location. The routable loopback address was used for management.

 

I then had that address advertised via OSPF to the internal routing area via whatever interface was connected at the time. The VM was replicated to other sites and scheduled backups were copied there as well.

 

During primary sites’ failure, client could power-up the VM, restore latest backup, connect to the same IP and continue managing their gateways.

 

What do you use the CheckMates platform for?

To learn from people who are infinitely more knowledgeable about the product than I am or whose experiences I and my clients can benefit from. To share my findings and ideas and to engage in the intelligent discourse about solutions, approaches and designs.

What do you like to do for fun? (Hobbies)
I am an avid reader. To (loosely) quote George R.R. Martin: “A reader lives a thousand lives. The man who never reads lives only one.” I travel a lot, and am a life-long learner. Occasionally, I write articles on LinkedIn: https://www.linkedin.com/in/vladimiry/detail/recent-activity/posts/

If you could create any new technology right now, what would it be?
Decentralized, unbreakable and simple to use passwordless authentication.

 

Anything else youd like to let other CheckMates members know about?

You are awesome! Either you are here to look for answers or to help others find them. Keep sharing with and helping those new to Check Point. I’ve met a lot of bright young people new to the field that are eager to learn; a few pointers from those with experience mean a world to them.

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

 

 

CLI Help  

Starting points for using the CLI with Check Point products

 

Performance Impact of Prevent versus Detect with IPS

The answer to this question might surprise you.

 

TE-1000x Implementation Issue 

If you're having issues doing an initial implementation of your Threat Emulation appliance, there's some some solutions here.

 

Migrate Export Fails (R77.30 OpenServer) 

If you're having issues running a migrate export in order to make a backup of your configuration and/or prepare for an upgrade to R80.10, there's some tips in this thread!

 

Threat emulation for POP3 

Not something Check Point does currently, but it did net some interesting discussion.

 

Did You Know...

 

Each month we nominate a member of the month based on their contributions to the community?

We write a brief piece on the user and share it with the wider CheckMates community!

Last month it was Danny Jung and you can read that piece here: CheckMates Member of the Month for October 2017: Danny Jung

Who's next? I know, but the rest of you will have to wait a little bit longer

 

Upcoming Events

Our upcoming events in the next few weeks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us:

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

If you can't wait for the weekly update, we also post relevant threads to our social media accounts:

 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

 

Searching for Address Spoofing Logs in R80 

You need to use the free text search capabilities of SmartLog to find these entries, as described in this thread.

 

Number of connections depending on dst addresses 

There are a couple of ways to get the results, using the CLI and using SmartView Monitor.

 

SmartLog R80.10 NAT information 

Another helpful tip on finding information (this time on NAT) in R80.10.

 

Guest Ports opened for outbound Internet access 

Do you have a guest network? What do you allow your guests to do? Weigh in here!

 

 

 

Did You Know...

We have local user groups all over the world?

While we span the globe here online, sometimes it's good to get together in person to share ideas, ask questions, and learn what your peers are doing.

The complete list of local groups is available here: CheckMates Local User Groups  

We will share upcoming in-person meetings on CheckMates Live

The locale-specific groups are for region-specific conversations and sharing materials presented in the relevant local group.

 

Upcoming Events

Our upcoming events in the next few weeks include:

 

Feedback

We would be delighted to hear your feedback! Here are a few ways you can share it with us: