This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help

The CheckMates Blog - Page 23

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
The CheckMates Blog

Here's where we let you know what's going on with the CheckMates Community.

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!

This Week in CheckMates 10 September 2018

PhoneBoy
Admin
Admin
‎2018-09-10 08:06 AM

CheckMates in the OC

Niran Turgeman and I were at the CPX in Southern California this week!

We, of course, had a booth:

And presented in a breakout session: 

I also had a lot of people come up to me to thank me for all the work I had done both in Ye Olden Days with the old FireWall-1 FAQ and the work we're currently doing with CheckMates.

It's always nice to be reminded of why I'm doing what I'm doing: helping others solve their problems.

CPX360 2019 is Coming!

We are looking ahead to our global CPX360 events in 2019 and want to make them better than ever!
You can help us do so by answering this short survey, which will also enter you in a drawing for Apple AirPods!

Community Highlights

Here are the top threads of the past week or so:

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon 

We added some details about the benefits of the newer kernel to this thread and are looking for more Production EA customers!

GDPR and Check Point 

GDPR is a hot topic, not just for Europe, but pretty much every business that deals with Europe. This video gives some basics on the topic and how Check Point can help with this 

https://community.checkpoint.com/community/management/visibility-monitoring/blog/2018/09/06/cyber-at... 

As promised a few months ago in a TechTalk...

Optimizing an IPS profile for SMB 

With added discussion about other blades in the comments.

RX-OVR drops and 10 gb hardware buffer 

Switching from multiple 1GB NICs to 10GB NICs definitely increases your throughput.

IPS exception for pre R80 gateways with R80 SMS 

IPS exceptions are managed differently for R80.x gateways versus pre-R80.x gateways.

How to change the SSL-VPN port on a locally managed SMB Appliance 

Pretty simple task, really, only made simpler when you can see how it's done with a video.

https://community.checkpoint.com/community/training-and-certification/blog/2018/07/20/emerging-techn... 

This technology is key in stopping Gen V Cyber Threats and we're giving training on it away to CheckMates members for a limited time!

Upcoming Events

Read more
3 1 350K

This Week in CheckMates 3 September 2018

PhoneBoy
Admin
Admin
‎2018-09-03 08:07 AM

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Let us know if you want to have it in your native language as well.

 

CheckMates in Norway

While I had a week off the road for a change, Valeri Loukine‌ and Lillie Miller‌ were in Norway for their local CPX!

Next week, Niran Turgeman‌ and I will be at the CPX in Orange County, CA!

Community Highlights

Here are the top threads of the past week or so:

Getting Started on Check Point CheckMates - How To & FAQ 

Valeri Loukine‌ and I (but mostly Valeri) updated our "Getting Started" page, which should be helpful for people who are new to CheckMates. 

A Primer on Anti-Spoofing 

I dusted off an old FAQ I wrote on Anti-Spoofing a couple decades ago and updated for current releases. And, of course, it prompted some questions Smiley Happy

Threat Prevention policies after R77.30 to R80.10 migration. Is it correct? 

An oldie but goodie that comes up from time to time about the IPS Policy Layer when you're managing R77.x gateways from R80.x.

One Time Scripts on Gaia Embedded 

Can't be done via SmartConsole, but can be done on the CLI via cprid. 

Changing the Standalone Remote Access Client flavor 

Apparently one does not need to reinstall the Remote Access client to change the "flavor" Smiley Happy

How to add a 30 day evaluation license to a SMB appliance 

More or less the same process for regular appliances as well. 

Check Point Active-Response Add-on for Splunk 

Our integration with Splunk has improved!

Tufin integration with Check Point R80.docx 

Speaking of partner integrations, here's how you integrate Check Point R80.x with Tufin!

https://community.checkpoint.com/thread/6533-ips-core-protection-i-need-help-to-understand?sr=inbox&... 

Another oldie but goodie: why did we move some of what were previously IPS protections to Inspection Settings.

Upcoming Events

Read more
6 0 770

This Week in CheckMates 27 August 2018

PhoneBoy
Admin
Admin
‎2018-08-27 08:09 AM

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Let us know if you want to have it in your native language as well.

CheckMates Live, Midwest Edition

This past week, I did three live events in Omaha, Des Moines, and Kansas City!

 

Of the three, the Fishtech office in Kansas City was the most impressive facility, complete with an AV crew:

And classic cars!

Community Highlights

 

A nice "best practices" question. There's reasons to do both. See also the following thread: Check Point Clustering Query 

NAT Rules and fw tab 

Nice little command to print the NAT rules currently installed on the Security Gateway.

We don't have this yet, but would love to see this develop!

[tool] - https://tcpdump101.com 

First noticed on CheckMates in https://community.checkpoint.com/groups/checkmates-en-français/blog/2018/08/16/retenir-les-commandes...‌, Sean Murray-Ford posted about the tool in English and has already received a lot of great feedback.

R80.10 Security Management Performance Tuning Guide 

This long-overdue guide is now available! Hope we'll see one for R80.20.Mx soon.

VM specifications for the R80.20.M1  

We haven't published official specs for this yet, but there is some guidance in this thread.

Firewall priority queues setting 

More performance tuning education by Timothy Hall‌. Yes, we are planning a TechTalk on this. Stay tuned!

Activate bashUser via script on a Embedded Gaia device? 

Can be generalized to run any command on an Embedded Gaia (SMB) appliance using cprid.

R80.10 - Apps do not run on all services 

Pro-tip as you're moving your gateways to R80.10.

Check Point Diagnostic Console (cdc)  

A fork of Danny Jung‌'s Common Check Point Commands (ccc)‌ script.

Management API Changelog is now available 

Will be included in future releases as part of the on-device documentation as well.

New to Check Point Scripting - Where to start from? 

There are many ways to "script" in Check Point. 

MOTD after C2S VPN established 

You can run a post-connection script on the client to show a message.

Upcoming Events

Read more
16 0 742

This Week in CheckMates 20 August 2018

PhoneBoy
Admin
Admin
‎2018-08-20 08:02 AM

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Let us know if you want to have it in your native language as well.

CheckMates in the OH!

Moti Sagey‌, #FlatMoti, and I did an event in Cleveland:

Moti then went to St. Louis for a local CPX event:

Meanwhile, I drove down to Columbus and did another CheckMates event:

Community Highlights

Meanwhile, the  portion of the community continues to roll along!

Here are the top threads and content for the past week:

IPS Ease of Use in R80.20 TechTalk 

Want to get a sneak peak of how we're improving IPS in R80.20? Check this TechTalk out! You can also watch recordings of our past TechTalks as well!

R80.20 – Integrating Google Cloud Account 

Another "How To..... " Videos by Yair Herling‌ showing you how to integrate with Google Cloud Platform.

Security Gateway Packet Flow and Acceleration - with Diagrams 

Different visual takes on how traffic is processed by the Security Gateway, depending on what features are used.

https://community.checkpoint.com/docs/DOC-3077 

Postman is a way to see how our API works, and we now have an updated Postman Collection for R80.20.M1 (which does have some API changes).

IPS Geo-Policy Whitelist by Domain Name 

Not currently supported, but it's coming and there's a workaround in the meantime.

How to use Identity Awareness Tags in R80.20.M1 

Requires R80.10 and above gateways.

SIC issue 

Tricky issue the community was able to isolate and fix Smiley Happy

IPS Bypass 

How does this work? This thread explains it.

Eventia Log Parsing & R80.20 (M1) 

If you're ingesting syslogs into your SmartEvent, the following (updated) parser might be useful.

Check Point Security gateway freezes, crashes, or reboots randomly, core dump files are not created 

Someone's annotated experience with troubleshooting these issues with sk31511. 

 

Did you realize we have an API for SandBlast? How are you using it? 

 

Do you use fw ctl zdebug? Chime in!

Upcoming Events

Read more
14 0 947

This Week in CheckMates 13 August 2018

_Val_
Admin
Admin
‎2018-08-13 12:18 AM

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language? Sure!

Do not forget that while most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in other languages! 

Let us know if you want to have it in your native language as well.

Community Highlights

While Dameon and flatmoti enjoy their vacation, 

we are having a very busy week here at checkmates‌:

R80.x Security Gateway Architecture (Logical Packet Flow) 

Heiko Ankenbrand endlessly continues perfecting his popular article.

There is also a spin-out discussion:

How does the Medium Path (PXL) and Content Inspection work with R80 

were we deepen our understanding of Medium Path and related technological solutions. The newest painting by Heiko Ankenbrand‌ definitely helps:

Security Gateway Packet Flow and Acceleration - with Diagrams 

That is yet another attempt to put packet flows on a chart or two. This one is based on official Check Point GW architecture diagrams. FW path, Medium and Accelerated Paths are presented separately, for better clarity.

 How to use Identity Awareness Tags in R80.20.M1 

Tomer Sole‌ explains the new Identity tagging feature available with R80.20.M1 release

R80.10 Upgrade Guide and Best Practices - Slideshow 

This is another Tomer's hit (members only, sorry folks, you need to register to get here)

Block specific File extention 

we learn that R80.10 is needed for that.

Build Azure CloudGuard using Terraform

the title says it all

Checkpoint r77.30 cluster migration from hardware to VM 

We are discussing the most gracious ways to move a cluster into new environment.

Check Point Lightboard Series - SandBlast Mobile Architecture 

Must seen video about SandBlast Mobile

Oldie but goldie:

Danny Jung‌'s document  is almost one year old yet still steering interesting discussion in the comments: Common Check Point Commands (ccc) 

Another classic diagram Ports Used for Communication by Various Check Point Modules is still getting lots of hits

Upcoming Events

Read more
34 0 2,800

This Week in CheckMates 6 August 2018

PhoneBoy
Admin
Admin
‎2018-08-06 08:07 AM

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Your Language!

While most of the content on CheckMates is in English, we now have a few groups where both content and discussions are available in local language!

Community Highlights

Here's some threads to have a look at from the last week or so:

My Top 3 Check Point CLI commands 

This thread is more than a year old at this point and it is by far our most viewed and contributed to thread on CheckMates to date!

Lightboard Series - Understanding the Shared Responsibility Model 

Another "How To..... " Videos‌ from Yair Herling‌ about 

NATs Issue 

Some basics on Network Address Translation covered in this thread.

Legacy DHCP 

If you're upgrading to R80.10 and using Legacy DHCP services, check this thread.

Questions around API and Monitoring 

The answer is a run-script API call, but you have to read the output. Or use SNMP.

Packet Mode, a new way of searching through your security policy in R80.10 

It's available via the API but it works a little differently than through SmartConsole.

Restart SMB WebUI process (HTTPD) 

More specifically this is about restarting the UserCheck portal, which works the same as it does on a regular Security Gateway.

CloudGuard SaaS GA, prerequisites and minimum quantities

CloudGuard SaaS‌ is launching soon and now has it's own space on CheckMates!

ICMP-Proto added to Anonymizer 

This issues has been resolved in the latest App Control signatures. Make sure you update and install policy!

cpug.org or CheckMates? 

A bit of history of the two sites here.

Upcoming Events

Read more
38 1 2,352

cpug.org or checkmates ?

Jerry
Mentor
Mentor
‎2018-07-30 08:56 AM

Dear PhoneBoy (yes you! Dameon Welch Abernathy

is cpug.org dead or alive? are you keeping up with both "spaces" at the same time?

don't you think just for a minute that "merging" those two communities (cpug.org and CheckMates) would be a wonderful idea going forward? Smiley Happy Unless I'm late with this question ... and you've already heard that question ...

b e s t

Jerry

Read more
1 14 18.9K

This Week in CheckMates 30 July 2018

PhoneBoy
Admin
Admin
‎2018-07-30 08:00 AM

@

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

CheckMates in Vancouver and Jackson

Valeri Loukine‌ and I hit the road this week and did events in Vancouver, BC and Jackson, MS!

Community Highlights

Here's some threads to have a look at from the last week or so:

How-to Videos:

Last week, Yair Herling‌ created a video about the High Availability Architecture with R80.10. You asked for one with a focus on multi-domain, Yair delivers! R80.10 High Availability in Multi Domain Environments 

We also have videos on Combining AD identity with AWS tags in Check Point CloudGuard Policy  and Step by Step deployment of automated, multi hub Transit VPC from Jonathan Lebowitsch‌!

SandBlast Mobile 3.0

This past week, we released SandBlast Mobile 3.0, which adds quite a lot of new features and functionality. We've got descriptions of the functionality and how to enable it on CheckMates:

Want to join R80.20 EA activities? 

We are actively looking for customers to join the R80.20 Early Availability program, specifically the private EA. Check the details here!

https://community.checkpoint.com/community/training-and-certification/blog/2018/07/20/emerging-techn... 

Yes, we offer free training on our emerging technologies!

OPSEC LEA pull from a SIEM on R80.10 Smart-1 Log Server 

If you have restricted access between the management and log server and want to pull logs from the log server using LEA, this thread might be helpful.

R80.10 IPS packet capture...how does it work? 

If you're curious...

Check Point Firewall Admin Tasks 

Did we miss any essential tasks here?

Will (Smart)Workflow come back? 

This topic keeps coming up, both  and offline. Here's the definitive thread.

R80.x Security Gateway Architecture (Logical Packet Flow) 

Another great community diagram from Heiko Ankenbrand‌!

Tools and referenced SKs for R77.30 appliance to VM migration

For backups, testing upgrades, or actually doing the upgrades...

Upcoming Events

Read more
2 0 1,057

This Week in CheckMates 23 July 2018

PhoneBoy
Admin
Admin
‎2018-07-23 08:06 AM

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

Community Highlights

Here's some threads to have a look at from the last week or so:

How-To Videos

We've had a few "How To..... " Videos‌ added this week:

https://community.checkpoint.com/community/secure-knowledge/blog/2018/07/15/introduction-to-securekn... 

Valeri Loukine‌ is starting to do a series of articles about SecureKnowledge, Check Point's official Knowledge Base. We also created a specific SecureKnowledge‌ space for discussions related to SecureKnowledge. 

Check Point R80.20 Demo TechTalk and Q&A 

In addition to the actual demo (and recording thereof), there were a lot of questions around R80.20 that we answered in the comments.

SmartView: Accessing Check Point Logs from Web 

One thing that was improved in R80.20.M1 was SmartView. Some details in this thread.

Threat Prevention Policy Layers 

Discussion about how policy layers work for Threat Prevention and when logs are generated.

Content Awareness Log with file name 

Curious why sometimes Content Awareness doesn't log file names? Here's why.

Is there a way to get a file using the API? 

Not directly, at least currently, but...

Check Point Firewall Admin Tasks 

More "best practices" being added to this thread...

Is it possible to get gateways config without Manager ? 

This is why you need to do regular backups of your management.

Ports Used for Communication by Various Check Point Modules 

Heiko Ankenbrand‌ keeps updating this fabulous document. 

Management API - internal structure 

There's a couple of different API servers: one that serves the REST API, and another one specifically for SmartConsole.

https://community.checkpoint.com/thread/8582-emerging-materials-web-training 

We offer free training on some of our emerging technologies, as described at the link above!

Upcoming Events

Read more
0 0 744

This Week in CheckMates 16 July 2018

PhoneBoy
Admin
Admin
‎2018-07-16 08:06 AM

Welcome to "This Week in CheckMates," your weekly highlight reel for all things CheckMates!

Past and future posts will be available here: About CheckMates

To have these updates show up in your preferred RSS reader add the following URL: About CheckMates RSS Feed 

See also our social media accounts and our podcast (RSS Feed😞

Shenanigans in Tel Aviv

I was in Tel Aviv this week along with Valeri Loukine‌ and... stuff happened.

I talked with new hires about CheckMates:

I was a teleprompter for Moti (so was Valeri Loukine‌) while we were recording part of the Mid-Year Report - Top Wanted Malware of 2018 (so far)‌:

And we recorded the live Q&A:

Community Highlights

Meanwhile, on the CheckMates community site, several discussions went on.

Here's a sample:

Check Point Firewall Admin Tasks 

More suggestions are showing up in this thread. What are your "suggested" task for a new Check Point admin (either totally new to Check Point or just a "new-to-you" Check Point environment)?

Forward tracker logs 

"Log Forwarding" only works to other Check Point log/management servers. To send them to syslog, use Log Exporter

Basic script for importing IP Address objects from feed (here office365)  

I'm sure, with some hacking, this script could be useful in other contexts!

R77.30 VSX appliance upgrade to R80.10 

An old thread that helped at least one person do the upgrade successfully. If you're planning to do this sort of upgrade soon, check it out!

VPN Troubleshooting Commands  

A nice list if you're troubleshooting issues with VPN on Check Point.

Log export to excel CSV 

Easiest way? Use SmartView!

Migrate policy and object to another smartmanagement 

There are many options, especially with R80.x!

https://community.checkpoint.com/docs/DOC-3014-show-bgp-peers-across-vsx-in-cli 

Nice little script

Upcoming Events

Read more
0 0 638