topic Cipher Configuration Tool (CCT) in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cipher-Configuration-Tool-CCT/m-p/27717#M2192 <HTML><HEAD></HEAD><BODY><P style="text-align: center;">Starting with R80.10 you can use the all new</P><P style="text-align: center;"><SPAN style="font-size: 22px;"><STRONG><A href="http://supportcontent.checkpoint.com/solutions?id=sk126613">Cipher Configuration Tool (CCT)</A></STRONG></SPAN></P><P style="text-align: center;">to control ciphers.</P><P></P><P>To enable the tool in Expert mode, do the following:</P><P></P><OL><OL><LI>Create a new file named <STRONG>vpn_cipher_priority.conf</STRONG>&nbsp; in <STRONG>$CPDIR/conf</STRONG></LI><LI>Edit the<STRONG>&nbsp;<STRONG>vpn_cipher_priority.conf</STRONG> </STRONG>file to look like this:</LI></OL></OL><P></P><P style="padding-left: 30px;"><IMG alt="" /></P><P style="padding-left: 30px;">4. Enable CCT by editing the registry key:&nbsp;<STRONG>#&nbsp;ckp_regedit -a SOFTWARE/CheckPoint/FW1 enable_cipher_configuration 1</STRONG></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5. Push the policy to the relevant Security Gateway.</P><P></P><P>CTT works with:</P><UL><LI>GAIA WebUI</LI><LI>Mobile Access (SSL VPN)</LI><LI>DLPSenderPortal</LI><LI>UserCheck</LI><LI>NAC</LI></UL><P></P><P>Support for HTTPS Inspection is not included yet.</P></BODY></HTML> Tue, 18 Sep 2018 07:53:04 GMT Danny 2018-09-18T07:53:04Z Cipher Configuration Tool (CCT) https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cipher-Configuration-Tool-CCT/m-p/27717#M2192 <HTML><HEAD></HEAD><BODY><P style="text-align: center;">Starting with R80.10 you can use the all new</P><P style="text-align: center;"><SPAN style="font-size: 22px;"><STRONG><A href="http://supportcontent.checkpoint.com/solutions?id=sk126613">Cipher Configuration Tool (CCT)</A></STRONG></SPAN></P><P style="text-align: center;">to control ciphers.</P><P></P><P>To enable the tool in Expert mode, do the following:</P><P></P><OL><OL><LI>Create a new file named <STRONG>vpn_cipher_priority.conf</STRONG>&nbsp; in <STRONG>$CPDIR/conf</STRONG></LI><LI>Edit the<STRONG>&nbsp;<STRONG>vpn_cipher_priority.conf</STRONG> </STRONG>file to look like this:</LI></OL></OL><P></P><P style="padding-left: 30px;"><IMG alt="" /></P><P style="padding-left: 30px;">4. Enable CCT by editing the registry key:&nbsp;<STRONG>#&nbsp;ckp_regedit -a SOFTWARE/CheckPoint/FW1 enable_cipher_configuration 1</STRONG></P><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5. Push the policy to the relevant Security Gateway.</P><P></P><P>CTT works with:</P><UL><LI>GAIA WebUI</LI><LI>Mobile Access (SSL VPN)</LI><LI>DLPSenderPortal</LI><LI>UserCheck</LI><LI>NAC</LI></UL><P></P><P>Support for HTTPS Inspection is not included yet.</P></BODY></HTML> Tue, 18 Sep 2018 07:53:04 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cipher-Configuration-Tool-CCT/m-p/27717#M2192 Danny 2018-09-18T07:53:04Z