Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Bob_Zimmerman
Authority
Authority

UUID Algorithm?

It was recently pointed out to me that we have somewhere around 45k unused objects across our firewall managements. I've been identifying and deleting them, but in doing so, I found some runs of UUIDs which are similar enough I'm concerned about the randomness of UUID generation on the management servers. These are all from admin-created objects, not default objects from Check Point:

"6c3e5ac6-59c8-11de-912d-00000000c0c0"
"6c5bc390-59c8-11de-912d-00000000c0c0"
"6889d7e8-59c8-11de-912d-00000000c0c0"
"68ec706a-59c8-11de-912d-00000000c0c0"
"690982fe-59c8-11de-912d-00000000c0c0"
"6c763b80-59c8-11de-912d-00000000c0c0"
"692295c8-59c8-11de-912d-00000000c0c0"
"6942f714-59c8-11de-912d-00000000c0c0"
"69649c2a-59c8-11de-912d-00000000c0c0"
"69a7cc2a-59c8-11de-912d-00000000c0c0"
"6ba21350-59c8-11de-912d-00000000c0c0"
"6bbe93ae-59c8-11de-912d-00000000c0c0"
"6bdd0d8e-59c8-11de-912d-00000000c0c0"
"6bfd7da8-59c8-11de-912d-00000000c0c0"
"6c180aec-59c8-11de-912d-00000000c0c0"
"69caa2d6-59c8-11de-912d-00000000c0c0"
"69e8f736-59c8-11de-912d-00000000c0c0"
"6a0741be-59c8-11de-912d-00000000c0c0"
"6a2420fe-59c8-11de-912d-00000000c0c0"
"6a8313ca-59c8-11de-912d-00000000c0c0"
"6ac712dc-59c8-11de-912d-00000000c0c0"
"6ae6909e-59c8-11de-912d-00000000c0c0"
"6b05d8be-59c8-11de-912d-00000000c0c0"
"6b27d2b6-59c8-11de-912d-00000000c0c0"
"6b468c6a-59c8-11de-912d-00000000c0c0"
"6b801124-59c8-11de-912d-00000000c0c0"
"5f6799aa-a1c6-11e0-b514-000000004c4c"
"5ffbf104-a1c6-11e0-b514-000000004c4c"
"605d6c7c-a1c6-11e0-b514-000000004c4c"
"610321bc-a1c6-11e0-b514-000000004c4c"
"619589d0-a1c6-11e0-b514-000000004c4c"
"61eb2778-a1c6-11e0-b514-000000004c4c"
"62b58824-a1c6-11e0-b514-000000004c4c"
"636742f8-a1c6-11e0-b514-000000004c4c"
"64134f9e-a1c6-11e0-b514-000000004c4c"
"64961870-a1c6-11e0-b514-000000004c4c"
"6502de2e-a1c6-11e0-b514-000000004c4c"
"65b646d0-a1c6-11e0-b514-000000004c4c"
"664c63f4-a1c6-11e0-b514-000000004c4c"
"66ad25ea-a1c6-11e0-b514-000000004c4c"
"67650e62-a1c6-11e0-b514-000000004c4c"
"67dda958-a1c6-11e0-b514-000000004c4c"
"6841db94-a1c6-11e0-b514-000000004c4c"
"68f1b686-a1c6-11e0-b514-000000004c4c"
"6971bb10-a1c6-11e0-b514-000000004c4c"
"69dd44b6-a1c6-11e0-b514-000000004c4c"
"6a8d27fa-a1c6-11e0-b514-000000004c4c"
"6b1f0530-a1c6-11e0-b514-000000004c4c"
"6b9209e0-a1c6-11e0-b514-000000004c4c"
"6c47550c-a1c6-11e0-b514-000000004c4c"
"6cd19ab4-a1c6-11e0-b514-000000004c4c"
"6d34d6b0-a1c6-11e0-b514-000000004c4c"
"6de667f4-a1c6-11e0-b514-000000004c4c"
"6e6563b0-a1c6-11e0-b514-000000004c4c"
"4b71a21a-a1c6-11e0-b514-000000004c4c"
"4bf1b270-a1c6-11e0-b514-000000004c4c"
"4c55f60e-a1c6-11e0-b514-000000004c4c"
"4d181cd4-a1c6-11e0-b514-000000004c4c"
"4d8b370a-a1c6-11e0-b514-000000004c4c"
"4e1fafc0-a1c6-11e0-b514-000000004c4c"
"4ef18748-a1c6-11e0-b514-000000004c4c"
"4f63607a-a1c6-11e0-b514-000000004c4c"
"4ffa7e10-a1c6-11e0-b514-000000004c4c"
"50c2403a-a1c6-11e0-b514-000000004c4c"
"520875fe-a1c6-11e0-b514-000000004c4c"
"52b4f928-a1c6-11e0-b514-000000004c4c"
"53474ae4-a1c6-11e0-b514-000000004c4c"
"53a54216-a1c6-11e0-b514-000000004c4c"
"544af5c6-a1c6-11e0-b514-000000004c4c"
"54dd77fc-a1c6-11e0-b514-000000004c4c"
"5544407c-a1c6-11e0-b514-000000004c4c"
"55e9f792-a1c6-11e0-b514-000000004c4c"
"5678b90a-a1c6-11e0-b514-000000004c4c"
"56d59396-a1c6-11e0-b514-000000004c4c"
"577b54c0-a1c6-11e0-b514-000000004c4c"
"580a1192-a1c6-11e0-b514-000000004c4c"
"586ca780-a1c6-11e0-b514-000000004c4c"
"5902f596-a1c6-11e0-b514-000000004c4c"
"598cf71e-a1c6-11e0-b514-000000004c4c"
"59e61178-a1c6-11e0-b514-000000004c4c"
"5a8cd33c-a1c6-11e0-b514-000000004c4c"
"5b2a3294-a1c6-11e0-b514-000000004c4c"
"5b854fda-a1c6-11e0-b514-000000004c4c"
"5c2be976-a1c6-11e0-b514-000000004c4c"
"5cbd73d2-a1c6-11e0-b514-000000004c4c"
"5d179434-a1c6-11e0-b514-000000004c4c"
"5e4eb9cc-a1c6-11e0-b514-000000004c4c"
"5eaf88b0-a1c6-11e0-b514-000000004c4c"
"95afa03e-a1c6-11e0-b514-000000004c4c"
"9657852e-a1c6-11e0-b514-000000004c4c"
"97196b12-a1c6-11e0-b514-000000004c4c"
"976e2d14-a1c6-11e0-b514-000000004c4c"
"9817af6a-a1c6-11e0-b514-000000004c4c"
"98e77902-a1c6-11e0-b514-000000004c4c"
"993a4010-a1c6-11e0-b514-000000004c4c"
"99d5dd54-a1c6-11e0-b514-000000004c4c"
"9a951e6c-a1c6-11e0-b514-000000004c4c"
"9ae62348-a1c6-11e0-b514-000000004c4c"
"9b80c786-a1c6-11e0-b514-000000004c4c"
"9c5e5d4e-a1c6-11e0-b514-000000004c4c"
"9caac40e-a1c6-11e0-b514-000000004c4c"
"9d4ea402-a1c6-11e0-b514-000000004c4c"
"9e05cd8a-a1c6-11e0-b514-000000004c4c"
"9e6a4936-a1c6-11e0-b514-000000004c4c"
"9f1ac478-a1c6-11e0-b514-000000004c4c"
"9fdb0c24-a1c6-11e0-b514-000000004c4c"
"a031a408-a1c6-11e0-b514-000000004c4c"
"a0ca9654-a1c6-11e0-b514-000000004c4c"
"a1864660-a1c6-11e0-b514-000000004c4c"
"a1d7456a-a1c6-11e0-b514-000000004c4c"
"a27d9e42-a1c6-11e0-b514-000000004c4c"
"a351dd42-a1c6-11e0-b514-000000004c4c"
"a3e27564-a1c6-11e0-b514-000000004c4c"
"a43f55ea-a1c6-11e0-b514-000000004c4c"
"a508d91a-a1c6-11e0-b514-000000004c4c"
"a598b8d2-a1c6-11e0-b514-000000004c4c"
"6f9aa5d8-a1c6-11e0-b514-000000004c4c"
"7017dea4-a1c6-11e0-b514-000000004c4c"
"712facea-a1c6-11e0-b514-000000004c4c"
"71c11e5a-a1c6-11e0-b514-000000004c4c"
"72299890-a1c6-11e0-b514-000000004c4c"
"72e45446-a1c6-11e0-b514-000000004c4c"
"736ab5c2-a1c6-11e0-b514-000000004c4c"
"73cf018a-a1c6-11e0-b514-000000004c4c"
"749d16ec-a1c6-11e0-b514-000000004c4c"
"752a33ce-a1c6-11e0-b514-000000004c4c"
"75d363e0-a1c6-11e0-b514-000000004c4c"
"767ea76e-a1c6-11e0-b514-000000004c4c"
"76cbe222-a1c6-11e0-b514-000000004c4c"
"7758ebfe-a1c6-11e0-b514-000000004c4c"
"7801523a-a1c6-11e0-b514-000000004c4c"
"785c6f9e-a1c6-11e0-b514-000000004c4c"
"793f0020-a1c6-11e0-b514-000000004c4c"
"79f7053a-a1c6-11e0-b514-000000004c4c"
"7a4aae56-a1c6-11e0-b514-000000004c4c"
"7aecbfb6-a1c6-11e0-b514-000000004c4c"
"7bb44946-a1c6-11e0-b514-000000004c4c"
"7c03654e-a1c6-11e0-b514-000000004c4c"
"7c9c57f4-a1c6-11e0-b514-000000004c4c"
"7d519eca-a1c6-11e0-b514-000000004c4c"
"7da2b3fa-a1c6-11e0-b514-000000004c4c"
"7e4d157a-a1c6-11e0-b514-000000004c4c"
"7f0f34a2-a1c6-11e0-b514-000000004c4c"
"7f6204de-a1c6-11e0-b514-000000004c4c"
"8007b258-a1c6-11e0-b514-000000004c4c"
"80bc11da-a1c6-11e0-b514-000000004c4c"
"810fd4e6-a1c6-11e0-b514-000000004c4c"
"81b0fcc2-a1c6-11e0-b514-000000004c4c"
"82723f90-a1c6-11e0-b514-000000004c4c"
"82c5ffcc-a1c6-11e0-b514-000000004c4c"
"836815e6-a1c6-11e0-b514-000000004c4c"
"84201bd2-a1c6-11e0-b514-000000004c4c"
"846daa5a-a1c6-11e0-b514-000000004c4c"
"85136da0-a1c6-11e0-b514-000000004c4c"
"85d66ce2-a1c6-11e0-b514-000000004c4c"
"862b2f2a-a1c6-11e0-b514-000000004c4c"
"86cd118c-a1c6-11e0-b514-000000004c4c"
"87cca214-a1c6-11e0-b514-000000004c4c"
"881e965a-a1c6-11e0-b514-000000004c4c"
"88b5e3de-a1c6-11e0-b514-000000004c4c"
"89715eca-a1c6-11e0-b514-000000004c4c"
"89bfa92c-a1c6-11e0-b514-000000004c4c"
"8a6377f0-a1c6-11e0-b514-000000004c4c"
"8b259312-a1c6-11e0-b514-000000004c4c"
"8b7d2320-a1c6-11e0-b514-000000004c4c"
"8c18afac-a1c6-11e0-b514-000000004c4c"
"8cd92714-a1c6-11e0-b514-000000004c4c"
"8d2bcf96-a1c6-11e0-b514-000000004c4c"
"8dc3b27a-a1c6-11e0-b514-000000004c4c"
"8e8c6508-a1c6-11e0-b514-000000004c4c"
"8eea7c6a-a1c6-11e0-b514-000000004c4c"
"8f8ba7c0-a1c6-11e0-b514-000000004c4c"
"904cb780-a1c6-11e0-b514-000000004c4c"
"909f96d0-a1c6-11e0-b514-000000004c4c"
"91429c72-a1c6-11e0-b514-000000004c4c"
"91fc363c-a1c6-11e0-b514-000000004c4c"
"9250fafa-a1c6-11e0-b514-000000004c4c"
"92ec9e56-a1c6-11e0-b514-000000004c4c"
"93a75dae-a1c6-11e0-b514-000000004c4c"
"93f94592-a1c6-11e0-b514-000000004c4c"
"9496c3b2-a1c6-11e0-b514-000000004c4c"
"955f4e9a-a1c6-11e0-b514-000000004c4c"

UUIDs are only safe from collisions if they are randomly generated. These clearly have no more than four bytes of entropy rather than the 16 bytes they should have, so I'm concerned they're generated using a non-uniform PRNG.

0 Kudos
3 Replies
PhoneBoy
Admin
Admin

Those are objects created by people, right?
@Omer_Kleinstern 

0 Kudos
Bob_Zimmerman
Authority
Authority

They were created by a person at some point, but I'm not sure exactly when. They might be from before we upgraded to R80 management.

Edit: Come to think of it, they may have been created with a dbedit script before the upgrade to R80. Still created by admin action, but maybe not from a human clicking around and entering the data.

0 Kudos
Bob_Zimmerman
Authority
Authority

I just found 721 objects with UUIDs ending with "4bf7-11df-bac0-000000000a0a". This management seems to have a LOT of objects with low-entropy UUIDs.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 20 May 2025 @ 11:30 AM (PDT)

    Las Vegas: Check Point Hybrid Mesh

    Wed 21 May 2025 @ 11:30 AM (MST)

    Tempe, AZ: Check Point Hybrid Mesh

    Tue 03 Jun 2025 @ 06:00 PM (EDT)

    Montreal: CPX Recap

    Tue 10 Jun 2025 @ 06:00 PM (EDT)

    Quebec City: CPX Recap
    CheckMates Events