topic Re: How to check telnet is enable or not. in General Topics

How to check telnet is enable or not.

Bharat_Sharma1 — Mon, 29 Jul 2019 13:12:36 GMT

Hi,

How to check telnet services is enable or not.

Please share cli command or Web GUI steps so I can check.

Re: How to check telnet is enable or not.

PhoneBoy — Tue, 30 Jul 2019 02:03:39 GMT

Telnet is not enabled by default, nor is it recommended.
The clish command to check is show net-access.
You can check in WebUI under Network Access.
https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Gaia_AdminGuide/html_frameset.htm

Re: How to check telnet is enable or not.

Bharat_Sharma1 — Tue, 30 Jul 2019 06:13:01 GMT

Hi,

Thanks for update, but the command your shared "net-access" is not work in clish & expert mode.

I have checked in WebUI I it's showing it's disabled. I have total 5 checkpoint firewall gateways & in two gateway (Open Server R77.30) WebUI I got the details, but other 3 gateway I am not able to check because "Network Access" option is not showing.

In this 3 gateway are appliance 2200 & R77.30 GAIA OS is installed, but when I logged in this gateway WebUI the login page is showing as R80.X. I have management open server R80.10.

Re: How to check telnet is enable or not.

PhoneBoy — Tue, 30 Jul 2019 14:56:38 GMT

The command show net-access should work in R77.30 and later for sure, assuming it's Gaia OS.
Here's a screenshot of what it should show in the WebUI (from R77.30).

Please post a screenshot of the relevant systems.

Re: How to check telnet is enable or not.

HeikoAnkenbrand — Tue, 30 Jul 2019 19:10:20 GMT

Telnet is disabled by default. There is no telnetd rpm packet installed on GAIA.

Check the telnet port😀.

# netstat -an | grep 23

Re: How to check telnet is enable or not.

HeikoAnkenbrand — Tue, 30 Jul 2019 19:09:31 GMT

More about open ports can be found here:

R80.x Ports Used for Communication by Various Check Point Modules

Re: How to check telnet is enable or not.

AHMADAHUSEN — Wed, 06 Nov 2019 11:08:58 GMT

Kindly enter the below command in clish mode,

> show configuration net-access

Then verify output which must be in below format to ensure about telnet is off, "set net-access telnet off"

This is basic hardening point of firewall.