topic Re: Mac support for SmartConsole apps in R80 in Firewall and Security Management

Mac support for SmartConsole apps in R80

Alex_Alborzfard — Wed, 06 Apr 2016 16:06:30 GMT

I'm using Mac for 90% of work. The only reason I have a 2nd machine (Windows PC) is to manage the firewall.

Will SmartConsole apps (SmartDashboard, Tracker, etc.) in R80 be able to run on Mac?

Re: Mac support for SmartConsole apps in R80

M_Ruszkowski — Wed, 06 Apr 2016 18:30:09 GMT

I agree we need a MAC OSX client for R80 as well. I am getting tired of having to install windows on a VM just to manage the firewalls. I could understand only having a Windows client 15 years ago, but come one get with the times. I could remember going to CPX and even Cisco Live conferences and when you looked at all the people in the breakout sessions and in the meeting rooms you might see one or two MAC's. Then over the years it went to more and more, and now it seemed like if you don't have a MAC you are in the minority.

Re: Mac support for SmartConsole apps in R80

Cory_Pellegren — Thu, 07 Apr 2016 12:34:44 GMT

Hi Alex,

We have nothing against Mac's, it is simply that we use graphical rendering frameworks and software framework for SmartConsole (Previously Smart Dashboard and other tools) that is only compatible with Windows. The good news is the new SmartEvent now has SmartView, a web visualization tool that you can log into to see any logs and events that are happening anywhere within your enviroment - right from your Mac, or even your iPad.

Cory Pellegren

Check Point - Security Engineer

Re: Mac support for SmartConsole apps in R80

Cory_Pellegren — Thu, 07 Apr 2016 12:38:11 GMT

Plus, with R80's APIs, you can now work from anywhere, regardless of OS

Re: Mac support for SmartConsole apps in R80

M_Ruszkowski — Thu, 07 Apr 2016 14:01:07 GMT

I agree that that API's are going to be a great help, and we are excited about it, but more in the scope of SDN. However, the API's are not a feasible solution for everyone, or even everyone on the same team. So you are forcing me to create scripts or write my own interface using the APIs just so I can use a MAC? That is not a solution. Yes the API's can be used from different OS's but it doesn't replace the GUI Console for team members that are Firewall admins that do day-to-day changes. These users are not programmers. It is easy for developers to sit back and say use the API's especially when you are the creator of the software. Sometimes I think Check Point forgets or loses touch with the people who use their software each and every day.

Re: Mac support for SmartConsole apps in R80

Tomer_Sole — Thu, 07 Apr 2016 14:36:21 GMT

Hi,

We are very aware of our customers' preferred operating systems. We hope that the changes of R80 solved some of the most crucial problems of our previous products, such as concurrent administrators, opportunity to scale up the objects system, and improving the user experience by moving from a blade-oriented application to a task-oriented application.

When we had the features/time matrix, for R80 the decision was to continue operating as a Windows native app, especially with SmartDashboard still being a component for working with some of the blades in this version.

We hope that the new Check Point API with the addition of this community will provide an ecosystem for users to share their works and upload new ways to interact with the Security Management server. We realize that this is not the complete solution for the Mac problem, but this is the feature set that R80 comes with.

Re: Mac support for SmartConsole apps in R80

PhoneBoy — Mon, 11 Apr 2016 03:58:08 GMT

The CLI is also an option, which will of course work from every OS over SSH or similar.

Re: Mac support for SmartConsole apps in R80

franco_carchedi — Tue, 05 Sep 2017 13:15:45 GMT

Smartconsole R77.30 on Ubuntu

Installing Smartconsole R77.30 ubuntu

Install playonlinux from Ubuntu software.

Launch playonlinux

Select “install a non listed program”

Create a new virtual drive.

I create a 32bit apps folder as below.

Install some libraries, and configure wine as below

Select 32bit application installation

Let it create the wine drive

Set wine to windows 7

Install the following libraries

POL_install_corefonts

POL_Install_donet35

POL_Install_donet35sp1

POL_Install_donet40

POL_Install_donet45

Pol_Install_mfc42

Pol_Install_mfc40

Pol_Install_msvc100

Pol_Install_msvc80

Pol_Install_msvc90

Pol_Install_msxml3

Pol_Install_msxml4

Pol_Install_msxml6

Pol_Install_riched20

Pol_Install_riched30

Pol_Install_riched20

Pol_Install_tahoma

Pol_Install_tahoma2

Pol_Install_vbrun6

Pol_Install_vcrun2005

Pol_Install_vcrun2008

Pol_Install_vcrun2011

Pol_Install_vcrun2012

Pol_Install_vcrun2013

Pol_Install_vcrun6

Pol_Install_InstallFonts

Follow install and let it complete.

You will see an error you need to do the following in terminal.

Sudo echo 0 | sudo tee /proc/sys/kernel/yam/ptrace_scope

During install you may get an error this can safely be ignored and continue on.

As below say no and move on

And this

Download checkpoint R77.30 Smartconsole.

Open the install with archive manager and extract smartconsole.exe

Next you should be prompted to find the install file browse and add it.

Complete the install as normal windows install then you can launch Smartconsole in Ubuntu as below

Known issues

Smartview tracker works also filtering is a bit strange in demo mode works with real firewall.
Login you need to use the mouse to move to the next character or will not take the password correctly.
Endpoint console does not work
SmartView monitor does not work

I have images to attach but forum does not allow this.

any questions just ask guys.

will try R80.10 at some point and let you know.

Thanks

Frank

Re: Mac support for SmartConsole apps in R80

PhoneBoy — Tue, 05 Sep 2017 14:19:12 GMT

We actually do allow photos...you can drag and drop them into the text editor.

Also, there's a "picture" icon in the toolbar of the editor.

If neither of these work for you, please contact me via PM.

The GUI in R80.x will surely have a different set of dependencies with Wine.

Previously I installed SmartDashboard with the commercial version of Wine called Crossover Linux (or Mac).

Re: Mac support for SmartConsole apps in R80

Hugo_vd_Kooij — Wed, 06 Sep 2017 07:45:48 GMT

I haven't tested WINE lately. For this purpose a small Windows virtual machine might to the trick as well.

For R80 I expect you might be able to do most of the work with the API if you really want to so you could write up some sort of portable Console if you feel inclined to do so.

Re: Mac support for SmartConsole apps in R80

franco_carchedi — Wed, 06 Sep 2017 08:41:43 GMT

Here is a video link all might make it easier.

R77.30 smartconsole on Ubuntu full install working - YouTube

Thanks

Frank

Re: Mac support for SmartConsole apps in R80

franco_carchedi — Wed, 06 Sep 2017 10:11:07 GMT

from testing R80.10 fails to connect to the Management server, I don't know what is causing this yet.

may be the finger print popup which is causing this as I am not seeing it on Wine with R80.10 install.

may be worth trying to add the registry entry for the finger print see if it gets round it.

but I expect Wine can't handle R80.10 full stop. also you need to use Staging version 2.16 to get Smartconsole R80.10 to start in Wine.

if anyone works this out let us know.

Thanks

Frank

Re: Mac support for SmartConsole apps in R80

PhoneBoy — Wed, 06 Sep 2017 17:17:23 GMT

I tried using Crossover Mac yesterday with R80.10 and got similar results.

First, you have to install the various dependencies manually (e.g. Visual C++ 2005/2010/2012 and Microsoft .NET 4.5), then install SmartConsole.

It seems the window visuals weren't properly refreshing, which created some interesting issues.

And yes, I ran into the "can't connect to management" issue as well.

Re: Mac support for SmartConsole apps in R80

_Val_ — Thu, 07 Sep 2017 08:00:01 GMT

I second the request to extend SmartConsole capabilities to OSX. It is a shame one has to run a virtual machine any time a FW rule needs to be changed.

Re: Mac support for SmartConsole apps in R80

_Val_ — Thu, 07 Sep 2017 08:02:24 GMT

Right. Let's go back to stone age and manage FWs from CLI. I thought CP was proud of providing the best administrative experience with fat GUI clients. My mistake 🙂

Re: Mac support for SmartConsole apps in R80

Michael_Pokrovs — Thu, 07 Sep 2017 16:29:18 GMT

Ditto - I have to open Windows VM on my Mac just to be able to run SmartConsole

OSX support would be awesome

Re: Mac support for SmartConsole apps in R80

Eric_Boughton — Thu, 07 Sep 2017 18:14:28 GMT

Re: Ditto - Use a windows VM on a Mac for management. As one of the many Items I work with I'm unlikely to use anything but the built in management tool. OS X would be a nice direction to see.

Re: Mac support for SmartConsole apps in R80

Sergio_Alvarez — Mon, 11 Sep 2017 16:00:00 GMT

I don't believe saying "...we use graphical rendering frameworks and software framework for SmartConsole that is only compatible with Windows..." is a valid answer, nor suggesting the use of API or CLI. For everyday managing work of FW Admins working on Mac, a Mac Console is needed and is it just a matter of assigning Dev resources to it.

It is in fact shameful having to open a Windows VM just to able to run the Console. This is even a "limitation" mentioned by other vendors with clearly inferior consoles, but that can work from any OS.

I have hear complains about this for over 14 years now and honestly I was expecting Check Point considering it for R80.

Re: Mac support for SmartConsole apps in R80

Tomer_Sole — Mon, 11 Sep 2017 17:48:20 GMT

Hi Sergio,

Multiple OS support was considered during the design of R80. The decision was to prefer the framework that we eventually chose. That decision allowed us to pack the wide range of features SmartConsole offers today. It also enables us quality delivers of new features coming up. However, I can understand your point of view. As we progress, more features will find web UI alternatives starting already with the new SmartEvent (or SmartView).

Re: Mac support for SmartConsole apps in R80

Kurtis_Johnson — Mon, 11 Sep 2017 18:22:55 GMT

From my experiece, 11 years and 4 employers across Enterprises and Resellers, only one 1 of those companies would have had the option to use Apple. Are those asking for OSX support coming from a Consulting/Professional Services background, or is this coming from Enterprise customers?