Penalty Box Extension

[Danny]

🚨 Live DoS / DDoS mitigation within SmartConsole
🚀 Supports Maestro / ElasticXL
👉 Requires R82+

SmartConsole Extension to add Penalty Box to the objects' context menu within 'Gateways & Servers'.

Extension URL: https://dannyjung.de/pbox.json

Installation: SmartConsole > Manage & Settings > Preferences > SmartConsole Extensions

[Katya]

As a Canadian, I approve this name!

[jdababne]

Very cool. Thanks for sharing. Looking forward to check it out!

[frankcar]

Hi Danny, 

the command to enable pbox has that changed. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG/PTG... 

on maestro vsx using clusterxl it shows as unknown for us on the enabled status even tho it is enabled and we see violating ip's listed etc.

nice work makes it easier to view then CLI.

Thanks

Frank

[Danny]

@frankcar : Your link refers to R81 while this extension is for R82+ versions.

[frankcar]

https://sc1.checkpoint.com/documents/Appliances/Quantum_Spark_R82.00.X/CLI/EN/Content/Topics/fwaccel...

same on R82.

[Lesley]

This is not for GAIA embedded. Only GAIA

[frankcar]

SK112454

ProductCluster - 3rd-party, ClusterXL, Maestro HyperScale Firewall, Scalable Chassis, SecureXL, Security Gateways, Spark Firewall, VSX (Traditional)

Enabling Penalty Box

Penalty box is disabled by default and can be enabled/disabled using the following commands:

• To enable the penalty box:

  [Expert@HostName:0]# fwaccel dos config set --enable-pbox

• To disable the penalty box (this is the default):

  [Expert@HostName:0]# fwaccel dos config set --disable-pbox

but in the extension its using g_fwaccel dos pbox -E on 

-E is no longer available.

Thanks

[Lesley]

This SK is for R81.20, Danny made this extension for R82

[frankcar]

-E is on R82 my mistake, sorry Danny.