Dameon Welch Abernathy

This Week in CheckMates 27 August 2018

Blog Post created by Dameon Welch Abernathy Employee on Aug 27, 2018

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed):

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Let us know if you want to have it in your native language as well.

 

CheckMates Live, Midwest Edition

This past week, I did three live events in Omaha, Des Moines, and Kansas City!

 

Of the three, the Fishtech office in Kansas City was the most impressive facility, complete with an AV crew:

 

 

And classic cars!

 

 

Community Highlights

 

Switch or Cable between ClusterXL members for the sync network? 

A nice "best practices" question. There's reasons to do both. See also the following thread: Check Point Clustering Query 

 

NAT Rules and fw tab 

Nice little command to print the NAT rules currently installed on the Security Gateway.

 

CCSA/CCSE certification study material at CP community

We don't have this yet, but would love to see this develop!

 

[tool] - https://tcpdump101.com 

First noticed on CheckMates in Retenir les commandes FW MonitorSean Murray-Ford posted about the tool in English and has already received a lot of great feedback.

 

R80.10 Security Management Performance Tuning Guide 

This long-overdue guide is now available! Hope we'll see one for R80.20.Mx soon.

 

VM specifications for the R80.20.M1  

We haven't published official specs for this yet, but there is some guidance in this thread.

 

Firewall priority queues setting 

More performance tuning education by Timothy Hall. Yes, we are planning a TechTalk on this. Stay tuned!

 

Activate bashUser via script on a Embedded Gaia device? 

Can be generalized to run any command on an Embedded Gaia (SMB) appliance using cprid.

 

R80.10 - Apps do not run on all services 

Pro-tip as you're moving your gateways to R80.10.

 

Check Point Diagnostic Console (cdc)  

A fork of Danny Jung's Common Check Point Commands (ccc) script.

 

Management API Changelog is now available 

Will be included in future releases as part of the on-device documentation as well.

 

New to Check Point Scripting - Where to start from? 

There are many ways to "script" in Check Point. 

 

MOTD after C2S VPN established 

You can run a post-connection script on the client to show a message.

 

Upcoming Events

Outcomes