Check Point for Beginners - Typical Config Mistakes

[HeikoAnkenbrand]

I see here in the forum in the last months several articles, in which typical configuration mistakes are written. Let us write an article in which all users describe their typical configuration mistakes with solutions.

Article:

Danny Jung - Check Point configuration mistakes - Top 10 

Victor MR - Top human fails to avoid 

...

[HeikoAnkenbrand]

More see here:

https://community.checkpoint.com/docs/DOC-3741-r8030-cheat-sheet-clusterxl 

[HeikoAnkenbrand]

Should we put all the points together in one list?

[Vladimir]

I can give you my template for codifying recommendations:

[Boris_Karnaukh]

I would like to generalise here: Do not name anything by name which has any CheckPoint keyword within. Something like name-fw1 or whatever-vpn might wake up and bite you during upgrade where it hurts most.

Another thing people sometimes forget: rollback takes time. If you have 2 hours downtime and rollback is expected to take up to 30 minutes then you have a hour and half to get job done.