Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
I've been testing R80.30 EA very intensively in the lab over the last few days. Here I have discovered some interesting new commands on CLI. What did you discover that didn't exist before?
Please note that R80.30 is still in the EA phase. It may be that the information does not apply to R80.30 in the GA.
More interesting articles:
R80.20 - new interesting commandsR80.20 - new interesting commands
Under R80.30 it is possible to encrypt CCP traffic. This is very useful to protect the cluster from manipulated CCP packets. Therefore new commands have been implemented on the CLI for this purpose.
This command also shows the current status “on" or "off” of the CCP encryption on the cluster:
# cphaprob ccp_encrypt
clish> show cluster members ccpenc
With the following command the encryption can be permanently enabled on the fly:
# cphaconf ccp_encrypt on
In this way the encryption can be disabled on the fly
# cphaconf ccp_encrypt off
More informations see here:
https://community.checkpoint.com/docs/DOC-3546-r8030-securexl-ccp-encryption
