Create a Post

The CheckMates Blog

cancel
Showing results for 
Search instead for 
Did you mean: 
The CheckMates Blog

Here's where we let you know what's going on with the CheckMates Community.

PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

CheckMates Does CPX360, Vienna Style!

Our CPX 360 show in Vienna was our largest to date with over 4000 customers, partners, and employees in attendance!

 

 

Here I am with James Alliband‌ and Bien Nguyen‌ right before the keynotes:

 

 

Unlike in the Vegas and Bangkok events, CheckMates did not have a booth on the expo floor this time around.

Instead, we had a lounge outside of our breakout track, which proved to be quite popular!

(Great idea, Amit Sharon‌!)

 

 

 

The CheckMates track itself was quite popular as well, particularly Danny Jung‌'s session:

 

 

There was quite a lot to see at this years CPX 360 events!

 

 

Community Highlights

Here are the conversations worth watching in the community:

 

New Software Releases

 

How to apply QoS on a User for restricting Bandwidth? 

Came up here: Limit bandwidth. R77.30  

 

Allowing custom site with external hosted images 

Tricky when taking a whitelist approach and the content is hosted on a CDN.

 

SmartConsole | New 'Group Membership' Feature 

A few of you asked for this feature. It's been added in R80.20.M2.

 

Expert command of Security Management Server to show Initialization Status 

Remember this one.

 

Issues with IE and SandBlast Extension; GPO deployment may be helpful? 

These issues are fixed in E80.92.

 

Can the default be changed for the logging time period results? 

In SmartView, yes.

 

Managing a gateway over VPN 

You don't want to do this.

 

Enable DPD on R80.20 

Some confusion about how this works.

 

R77.20.85 performance issue on centrally managed SMB 

Some additional issues we're tracking in this thread.

 

Is CP planning to support Load-Sharing in future releases? 

It was not added to R80.20. We plan to have it later in 2019.

 

How do I change the https certificate for Sandblast API? 

It uses the SIC certificate, which means...you can't change it.

 

Upcoming Events

Due to the upcoming change to Lithium, we are maintaining our event calendar in Google Calendar.

You can browse our calendar of events here: CheckMates Calendar 

Upcoming events include:

We are currently in the planning phases for our 2019 events.

If you want one in your area, get in contact with us: checkmates@checkpoint.com 

Read more
5 2 1,444
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!
Past and future posts will be available here: The CheckMates Blog
To have these updates show up in your preferred RSS reader add the following URL: The CheckMates Blog RSS Feed
See also our social media accounts and our podcast (RSS Feed)

Vienna Calling!

You can bet the CheckMates team will be at CPX 360 in Vienna!

Meanwhile, Kishin Fatnani‌ took a great photo of a bunch of us in Vegas!

Posted: https://community.checkpoint.com/community/infinity-general/blog/2019/02/14/cpx360 

 

 

Community Highlights

Here are the conversations worth watching in the community:

 

Smart Console: Packet Mode - Possible Bug? 

Yes, theres a bug there, but thanks to the community, we'll see an improvement!

 

New in Developers (Code Hub)

 

Lower number of CoreXL instances in ClusterXL HA

The number of CoreXL on all cluster members must match or clustering won't work.

 

Application Control Bug!? 

Not really a bug, but a misunderstanding of how the policy works on SMB appliances.

 

ConnectControl / Logical Servers within same subnet 

Have to admit, this one stumped me, even!

 

Limited Permission Profile 

While it's not possible to limit who can read a specific policy, you can restrict what logs they can see (in R80.x at least).

 

How to check debug command ? 

Given there are a number of different ways to debug, there is no simple answer to this question.

 

R77.20.85 performance issue on centrally managed SMB 

The fixed version of firmware was released on 11 February. See: R77.20.85 for Small and Medium Business Appliances 

 

Log all the rules on R80.x 

Including the implied rules.

 

 

Rename the files. We are planning a fix for this.

 

Upcoming Events

Due to the upcoming change to Lithium, we are maintaining our event calendar in Google Calendar.

You can browse our calendar of events here: CheckMates Calendar 

Upcoming events include:

We are currently in the planning phases for our 2019 events.

If you want one in your area, get in contact with us: checkmates@checkpoint.com 

Read more
1 0 679
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates at CPX 360 Las Vegas

Between running the CheckMates sessions and other tasks, I didn't get as many photos of the team.

That said, a lot of us was there.

Personally, I was very blinged up during the event:

 

 

For those wondering, yes, we will have those pins in Vienna!

And we'll have these shirts (modeled by Toni Ponder‌):

 

 

In addition to the festivities of CPX, there was a gathering for those of us who had been at Check Point 10 or more years.

Personally, I just past the 20 year mark between my time at Nokia and Check Point.

Plaques were given, and I managed to get a picture with our CEO Gil Shwed:

 

 

And my partner in crime Moti Sagey‌ gave me a brief shoutout during his session:

 

Community Highlights

Here are the conversations worth watching in the community:

 

https://community.checkpoint.com/community/infinity-general/blog/2019/02/07/r8030-public-ea-program-... 

Are you participating in this yet?

 

https://community.checkpoint.com/community/infinity-general/blog/2019/02/05/r8020-new-jumbo-hotfix-t... 

Meanwhile, the latest GA jumbo hotfix is available.

 

Will (Smart)Workflow come back? 

We still plan to bring the features of SmartWorkflow back.

 

Gateway logs on Smartlog after SMS outages 

Here's a way to get the logs flowing again.

 

What is the procedure to Migrate firewall from one management server to another? 

Another oldie but goodie.

 

PAT/NAT to routed subnet? 

One use case for Address Translation.

 

Domain Object issue on R77.30 

These objects work a lot better on R80.20.

 

How to block some https sites? 

If you want to block (or allow) access to a specific site via HTTPS, this thread might be helpful. 

 

Upcoming Events

Due to the upcoming change to Lithium, we have migrated our upcoming event calendar to Google Calendar.

You can browse our calendar of events here: CheckMates Calendar 

Upcoming events include:

We are currently in the planning phases for our 2019 events.

If you want one in your area, get in contact with us: checkmates@checkpoint.com 

Read more
6 0 777
PhoneBoy
Admin
Admin

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates Migration to Lithium Platform

In case you are not aware, we are planning to migrate the platform we are using for CheckMates from Jive to Lithium.

I have written several posts on this recently:

We are nearing the time when the migration will take place, which we expect to happen during February.

Once the schedule is finalized, we will be sure to communicate it.

Community Highlights

Here are the conversations worth watching in the community:

R80.30 Early Availability Program is started! 

The update is that R80.30 Public EA is here! We plan to release this quarter. That said, more private EAs will help us release it faster!

Can't connect to management server via SmartDashboard 

This problem keeps coming up, particularly in fresh-installed R77.30 and earlier systems, for example in this thread: Problem with cluster access 75.40 VS . The above thread explains how to resolve the issue.

Adding members to a group (via CLI) 

An older thread where a more clever answer was posted.

Class names available for use with the "show-generic-objects" API command 

One way to find this information out.

smartlog too many logs:Non Compliant DNS 

A few different suggestions for addressing this issue.

Jumbo Jail - Stuck between installing newer jumbo and uninstalling older one 

Nice workaround for what is a bug.

https://community.checkpoint.com/community/management/visibility-monitoring/blog/2019/01/28/smart-vi... 

What's Infinity, you ask? Now you can see it!

https://community.checkpoint.com/thread/11305-confused-by-manual-nat-rules-kindly-asking-for-clarifi... 

Manual NAT rules for the gateway IP on an SMB appliance don't have an effect, but there's another way...

Upcoming Events

Due to the upcoming change to Lithium, we have migrated our upcoming event calendar to Google Calendar.

You can browse our calendar of events here: CheckMates Calendar 

Upcoming events include:

We are currently in the planning phases for our 2019 events.

If you want one in your area, get in contact with us: checkmates@checkpoint.com 

Read more
14 0 838
PhoneBoy
Admin
Admin

This is one of a series of posts I've done about our upcoming migration of the CheckMates community site to Lithium (from Jive).

Past posts on the topic include:

Now that we've done a couple of dry runs of the migration, I feel pretty confidence the majority of the content will  migrate between the platforms successfully.

That said, there are going to be a handful of items and settings that will not.

This post will attempt to detail those items so you know what to expect.

Events

Lithium does not have an "events" module/content type the way Jive does.

Going forward, we are posting our events on a public Google Calendar, which the site will display in the sidebar on the main page.

We will also have a blog for Upcoming Events that will contain the same information as well. 

Polls

Jive allowed users to create polls on numerous topics.

Lithium does not allow this and such posts will either not be migrated or will be migrated with the actual poll removed.

User Bookmarks and Follows

In Jive, you can bookmark and follow users or spaces.

While you can do similar things in Lithium, this information will not be migrated across.

That said, if you bookmarked pages using the native bookmarking feature in your browser, old URLs should still continue to work (but will be redirected to their Lithium equivalents).

Videos

While videos that are hosted externally will be migrated with the rest of the content, videos hosted on CheckMates will initially NOT be migrated.

These videos will be migrated in the coming days/weeks after the launch of the new community site.

Specifically, videos impacted by this include:

  • The R80.x Training Videos
  • TechTalks
  • Some of the How-To Videos

Videos that are hosted externally (e.g. on YouTube) will be available Day 1.

Contents May Shift During Flight

We took this opportunity to restructure the community somewhat.

While the majority of boards will remain unchanged, there is a different structure in place.

We've also added a couple new ones and merged a couple others.

The search function will help you find what you're looking for.

If You Can't Find Something After We Migrate...

There will be a couple options to find it:

  • Archive: Some content, as part of the migration, will be moved to a private archive space. Post-migration, we will review the content and either move it to the correct space or delete it as appropriate.
  • Jive Community in Read-Only: This community you're on right now will be set to Read Only right before the actual migration takes place. We plan to leave this version of the community available for a time on a different URL to handle missing content and migration issues.

We will address these issues on a case-by-case basis. 

Next Steps

We are putting the finishing touches on the site design, which will be a bit different from what we have today.

A select handful of you will be invited by email to have a sneak peek so we can get your feedback.

We are planning to launch the new site during February, with the exact timelines to be finalized in the coming days.

We do plan to post on CheckMates and send out a newsletter shortly before the migration happens with more details about what will happen when and what to expect.

Read more
4 2 903