EVE-NG image

[WhOPP]

Hi,

At work we use CheckPoint R81.10 installed on bare metal server. I am party new at firewalls and with CP at all.

So I need practice on lab environment, before I can move on to production environment.

I have a lab with Cisco devices in eve-ng, It would be really nice if I could also add CheckPoint (and smart console) to it.

My goal is to train different VPN scenarios and fw rules.

My question is: how to get (legally) image that will work with eve-ng?

[PhoneBoy · Accepted solution]

We did a breakout session in CPX 360 2023 on creating your own lab.
All the materials needed to do so are available for free.
To see this session: https://community.checkpoint.com/t5/Member-Exclusive-Content/How-to-Learn-Check-Point-Quantum/m-p/17... 

EVE-NG is like any virtualization environment in that you can create your own images by installing a VM from an ISO.
In believe EVE-NG uses the same KVM-based emulation that VirtualBox uses (used in the session above).
SmartConsole is just a Windows application, meaning you'll need to install a Windows VM and install the SmartConsole app on it (with dependencies).
You can download R81.10 (ISO and SmartConsole) from: https://support.checkpoint.com/results/sk/sk170416 
The installed ISO will have a 15-day Plug n Play license.
You can generate additional 30-day evaluation licenses as needed: https://community.checkpoint.com/t5/General-Topics/How-to-Request-an-Evaluation-License-for-Security... 

[the_rock · Accepted solution]

I helped someone about a year ago with this and we used exact same image we used for esxi and it worked. 

 

[the_rock]

@WhOPP , I assume that helped mate?

Andy

[WhOPP]

Yes it did. Thanks. My second doubt was licensing. Since we only have one license for one installation on server.

I will use 30-day evaluation for eve-ng

thanks you all for help, I really appreciate it.

maybe one more offtopic question; what CP course/license should I attend as a greenhorn in FWs and VPN to grow my knowledge.

I have basic networking knowledge (I have CCNA 200-301)

[PhoneBoy · Accepted solution]

In terms of our official offering (with certification), you can take the CCSA/CCSE courses.
We also offer free training materials in our Check Point for Beginners section of the community.

[WhOPP]

Great, will first look on free ones and continue with CCSA.

 Thanks 

[the_rock]

https://www.youtube.com/@checkpoint

Almost 1500 videos, amazing resource.

Happy watching : - )

Andy

[the_rock]

I would say same as Phoneboy, CP for beginners, but I always say to people (dont mean to sound funny now), just watch CP youtube channel and follow the videos by doing same in your lab.

Andy