topic Re: SMB 1500 - Set permanent kernel parameter in Spark Firewall (SMB)

SMB 1500 - Set permanent kernel parameter

CaseyB — Mon, 14 Aug 2023 12:41:38 GMT

How would I go about permanently setting this on an SMB 1500 device?

fw ctl set int fw_enc_conns_use_internal 1

The -f parameter is not valid for this device. It is also a centrally managed gateway, so the option is not in the GUI.

Re: SMB 1500 - Set permanent kernel parameter

the_rock — Mon, 14 Aug 2023 12:48:03 GMT

Are you sure thats right kernel parameter? I tried it on R81.20 latest jumbo (regular Gaia) and I get below.

Andy

[Expert@quantum-firewall:0]# fw ctl get int fw_enc_conns_use_internal
Get operation failed: failed to get parameter fw_enc_conns_use_internal
get: Operation failed
Killed
[Expert@quantum-firewall:0]# fw ver
This is Check Point's software version R81.20 - Build 011
[Expert@quantum-firewall:0]#

Re: SMB 1500 - Set permanent kernel parameter

the_rock — Mon, 14 Aug 2023 17:29:05 GMT

Never mind, disregard my last post, I see below it is valid

https://support.checkpoint.com/results/sk/sk119415

I would confirm with TAC myself.

Andy

Re: SMB 1500 - Set permanent kernel parameter

CaseyB — Mon, 14 Aug 2023 17:27:07 GMT

I had the -f in the wrong spot. This works:

fw ctl set -f int fw_enc_conns_use_internal 1

Re: SMB 1500 - Set permanent kernel parameter

the_rock — Mon, 14 Aug 2023 17:29:26 GMT

Good job!