topic Re: cpconfig on SMB 1430 in Spark Firewall (SMB)

cpconfig on SMB 1430

nflnetwork29 — Mon, 07 Dec 2020 21:26:20 GMT

I have a SMB 1430 gateway . trying to run cpconfig

Does this command not exist on SMB?

[Expert@Gateway-ID-7F98AB2A]# cpconfig
bash: cpconfig: command not found

Re: cpconfig on SMB 1430

John_Fleming — Mon, 07 Dec 2020 23:21:10 GMT

Sorry, no there isn't a cpconfig. Gaia Embedded is %60 compatible. If you're looking for sic reset the command its set sic_init from clish.

Re: cpconfig on SMB 1430

PhoneBoy — Tue, 08 Dec 2020 01:02:42 GMT

cpconfig is not relevant on SMB appliances.
What are you trying to configure?

Re: cpconfig on SMB 1430

nflnetwork29 — Tue, 08 Dec 2020 03:31:33 GMT

i was trying to enable CoreXL / SecureXL for testing purposes / studying for CCSA .

Re: cpconfig on SMB 1430

John_Fleming — Tue, 08 Dec 2020 03:59:07 GMT

Better off with VM(s).

Re: cpconfig on SMB 1430

nflnetwork29 — Tue, 08 Dec 2020 04:26:09 GMT

can you be more specific John ?

Re: cpconfig on SMB 1430

_Val_ — Tue, 08 Dec 2020 07:43:45 GMT

SMB appliances are not covered in CCSA, and much have less functionality than regular security gateways. For example, CoreXL & cpconfig are not available.

Do you virtual lab with a regular GW on vmware. As an alternative, look for Network security virtual labs here: https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/Network-Security-Virtual-Labs/ba-p/101229?cat=2

Re: cpconfig on SMB 1430

PhoneBoy — Tue, 08 Dec 2020 17:19:08 GMT

I don't believe we allow you to change the CoreXL/SecureXL settings on SMB appliances.
Further, it makes no sense on a 1430 given it only has two cores and it's based on R77.x code (the CCSA is based on R80.x).
Also, the SMB appliances are not covered as part of CCSA/E.

Re: cpconfig on SMB 1430

John_Fleming — Tue, 08 Dec 2020 21:18:10 GMT

Wellll.... it technically have 4 cores but 2 of them are shutdown in the kernel.

Re: cpconfig on SMB 1430

nflnetwork29 — Tue, 08 Dec 2020 23:07:09 GMT

@John_Fleming wrote:
Wellll.... it technically have 4 cores but 2 of them are shutdown in the kernel.

whaaaaa???

can they be enabled some way?

Re: cpconfig on SMB 1430

PhoneBoy — Tue, 08 Dec 2020 23:14:04 GMT

A 1450 is the same hardware with those cores enabled.
There isn't a way to "field upgrade" one of these appliances.

In any case, even if you had a 1450, it doesn't change anything we've said here regarding your ultimate goals.

Re: cpconfig on SMB 1430

John_Fleming — Tue, 08 Dec 2020 23:37:34 GMT

Welllll.. maybe.... I will say i've tried enabling them via the linux interface to down/up an core via software and that didn't work. I've noticed there is some stuff in the boot loader that talks about cpus=2 but i'm not willing to risk bricking my 1400.

Re: cpconfig on SMB 1430

John_Fleming — Tue, 08 Dec 2020 23:38:04 GMT

for sure, i'm just nit picking.

Re: cpconfig on SMB 1430

nflnetwork29 — Wed, 09 Dec 2020 04:36:44 GMT

the 1430 has 2 cores so why cant we enable CoreXL?

What is the purpose of the 2nd core. What process does it run ?

Re: cpconfig on SMB 1430

G_W_Albrecht — Wed, 09 Dec 2020 09:56:30 GMT

CoreXL is useless on 14x0 SMBs (just count SMB cores and CPUs 😉 and SecureXL is always on - so you do not need it.

For CCSA you should use the VMs from the classroom specs, but surely not GAiA Embedded - and you will need a SMS VM anyway...

Re: cpconfig on SMB 1430

G_W_Albrecht — Wed, 09 Dec 2020 10:00:37 GMT

See SecureXL & CoreXL on SMB devices and CoreXL on SMB

Re: cpconfig on SMB 1430

PhoneBoy — Wed, 09 Dec 2020 16:21:28 GMT

CoreXL needs at least four cores to do much of anything.
Regardless, CoreXL/SecureXL settings aren't really designed to be tweaked on SMB appliances.
If learning the specifics of that is your goal, install R81 in a Virtual Machine with 8+ cores assigned.

Re: cpconfig on SMB 1430

nflnetwork29 — Wed, 09 Dec 2020 18:00:52 GMT

yes i have SMS VM.

i know its only a dumb down code set on the 1400 series but sometimes it's nice to have physical appliance.

thanks for the help.