Create a Post

The CheckMates Blog - Page 32

cancel
Showing results for 
Search instead for 
Did you mean: 
The CheckMates Blog

Here's where we let you know what's going on with the CheckMates Community.

Amit_Sharon
Employee
Employee

Each month, we plan to highlight a specific member of the community. For August, that person is Tim Hall‌!

Tim Hall is the founder and owner of Shadow Peak Inc., an independently run enterprise started in 2004 that specializes in Check Point training and consulting services. His company has assisted clients from all over the world, including one with firewalls located in Antarctica.

 

Tim has been working with Check Point products since 1997, and as part of his work authored "Max Power: Check Point Firewall Performance Optimization", which centers on the performance intricacies of Check Point products. His newest publication, a second edition focusing on the R80 and R80.10 updates, is currently under development.

 

Although Tim would consider himself an expert in R80.10, he noted, “CheckMates has helped me with learning about the new R80 release, learning about little nooks and crannies in the GUI, and the underlying implementation.”

  

Apart from his love for technology, he also has a passion for collecting. Tim has a basement full of antique pinball machines from the 1970’s to the 1990’s, as well as a collection of arcade video games including Galaga, Tempest, and Pac-Man.

 

In Tim’s words:

"CheckMates is the continuation of spreading knowledge and assisting administrators with various problems.” 

On behalf of CheckMates, we thank Tim for sharing his valuable knowledge with us!

Our interview questions and answers are below:

 

Tell us a little about yourself & what you do

I've been working with Check Point products since 1997. I have had my own independently run business since 2004. My business Shadow Peak Incorporated is a one-man corporation that specializes in Check Point training and consulting services.

 

Tell us a little about your experience with Check Point

In 1997, with a company called Evolving Systems, we needed a firewall that could do a VPN, and there was this relatively new kid on the block called Check Point. It was a logical pairing of product to experience based on the Solaris systems experience I had. It's been 20 years this year that I've used a variety of Check Point products.

 

Do you have a unique deployment of a Check Point product?

There's a large defense contractor with firewalls in Antarctica that I did a fair amount of work for that had a pretty large Check Point deployment. I was doing some work with a firewall and I’m like, “Why is this one so slow?” It was because we’re going over a satellite to reach that area and we could only do it at certain times of day.

 

What do you use the CheckMates platform for?

With CheckMates for me, the best thing was learning about the new R80 release, learning about little nooks and crannies in the GUI, and the underlying implementation. Definitely learning about the new R80 and of course R80.10 releases is mainly what I use it for.

 

What do you like to do for fun? (Hobbies)

I collect antique pinball machines and video games. In my basement I have pinball machines ranging from the 1970s to the 1990s. I also have a Galaga, Tempest, Pac-Man – actual full size arcade cabinets. I'm also always reading about different technology or articles on CPUG. I strive to be a pure force of technical knowledge.

 

If you could create any new technology right now, what would it be?

If I could create any new technology, I'd say it would be for an individual's personal data that is bought, bartered, brokered, traded, etc., to notify them every time that data is used or accessed. It would be very scary and I think people would realize how much their personal data is just kind of floating around and being leaked and sold.

Read more
7 3 2,047
PhoneBoy
Admin
Admin

Here's this weeks installment of "This Week in CheckMates."

Past and future posts will be available here: About CheckMates 

If you can't wait for the weekly update, follow our Twitter account where threads are highlighted regularly: @CPCheckMates!

Community Highlights

Here are some highlights from the week's activity on CheckMates:

My Top 3 Check Point CLI commands

While this was featured last week, it's worth mentioning again as this thread has quickly become one of the most active posts we've had on CheckMates! New commands being added all the time. Have you contributed yours yet?

Check Point Gateway Updates and SHA-256

This issue came up in two different threads:

Check Point switched to using SHA-256 certificates on the systems which gateways fetch various updates from (e.g. for App Control and Anti-Virus signatures). This impacts all Check Point products. To ensure your gateway can receive updates, check your code version jumbo hotfix level against the following SK: Check Point update and online services migration to SHA-256 based certificates 

How-to use Postman with R80 Security Management API  

Postman is a free Google Chrome extension that can be used for testing and experimenting with web-services, such as the Security Management API that was released with R80. A new Postman Collection was added to this thread that will allow you to use Postman with the R80.10 API.

Continuing policy work-in-progress with R80.10 Session Take Over

Here's a brief video showing a cool feature in R80.10: the ability to take over a session another administrator has started but didn't commit! We plan to produce additional videos in the near future.

This Week in Threats: Week of July 24th 2017

Our Threat Intelligence team has been producing a weekly report that discusses the latest threats for some time now. We are now making these reports available to CheckMates members!

App Control issue with R80 MGMT, 1400 Appliance

If you're managing any R77.x gateway (including SMB appliances) with R80.10 and you want to use Application Control/URL Filtering, make sure you are creating and using a separate policy layer for this feature. This is because R77.x gateways do not support unified policy the way R80.10+ gateways do. 

Did You Know...

The forums have RSS feeds?

You can either subscribe to individual spaces or the whole site!

If you go to the relevant space and navigate to the Content section:

You will find an RSS link at the bottom left:

This link can be imported into your RSS reader of choice. 

You'll also notice in the above screenshot that you can get a list of content for the entire site using the link https://community.checkpoint.com/content

Two tips for the price of one Smiley Happy

Feedback

You are of course welcome to respond to this post if you have questions! If you want to send something privately, you can send an email to [email protected] or send a Tweet to @CPCheckMates and we'll respond promptly.

Read more
0 0 747
PhoneBoy
Admin
Admin

Last week, I posted a picture of an old Check Point floppy disk to LinkedIn and twitter as a "Throwback Thursday" post.

The photo was courtesy of a long-time Check Point employee:

 

Check Point v1.05 Floppy

 

I wish I could say I owned this floppy, but it was a little before my time (2.1 was the first version I used).

A lot of people both publicly and privately responded with some of their Check Point memorabilia, i.e. anything that had the Check Point logo or branding on it!

Sadly, I do not have a ton of older Check Point memorabilia, but I do have a few things.

One of them I created, and I know a few of you have it.

I doubt you've seen this version, though:

 

Essential Check Point FireWall-1 Book Cover (Chinese Edition)

 

There's also the infamous "Power of Two" Hot Wheels car.

Thanks to https://community.checkpoint.com/people/thalld401179d-0d5b-369d-a0f2-387c3ef54533, I have one still in it's packaging:

 

 

 

Finally, I have one piece of audio memorabilia attached to the post.

It was commissioned for Check Point's 10th anniversary back in 2003.

 

If you have any Check Point-branded memorabilia, snap a picture and post it in the comments below for a chance to have that memorabilia autographed by the Founder and CEO of Check Point, Gil Shwed!

This includes Check Point employees!

Read more
6 21 13.5K
PhoneBoy
Admin
Admin

When you want to contribute something or ask a question in CheckMates, do you know in which space to post?

If you have specific feedback one way or the other, please post detailed feedback in the comments.

Yes5
Sometimes0
No0

Read more
0 2 578
PhoneBoy
Admin
Admin

Two new groups have been created:

These are private groups you must request access to.

Click the appropriate link and then click the big "Ask to join this group" button.

A moderator will review your request.

Read more
0 0 426
PhoneBoy
Admin
Admin

Here's this weeks installment of "This Week in CheckMates."

Past and future posts will be available here: About CheckMates 

Also, if you're not sure what CheckMates is, check out this short video!

 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

SNORT Rules and CheckPoint R77.30 IPS

The question was about having a particular signature trigger a block of the specific IP address for all traffic. This can be done, but it does require building a script that parses the log entry and executes fw samp to block the connection.

Installing take 10 of R80.10 blew away the gateway part of a single gateway setup. Is that a known p...

It appears to be a known issue that can happen under a rare combination of circumstances. Read the thread for a workaround to the issue. A fix for the issue will be coming in a future R80.10 jumbo hotfix.

Issue when migrating R77.30 to R80.10 Management Server

Look for words like "error","fail", and "unable" in the following file: $FWDIR/log/cpm_for_cpdb-YYYY-MM-DD-HH-MM-SS.ELG. You may need to engage with the TAC depending on what this turns up for you.

My Top 3 Check Point CLI commands

Chances are, if you've been using Check Point products for a while, you've had to do something on a command line. We've shared some of our favorite (and even obscure) commands with you here. This has quickly become one of our most active threads, chime in with your favorites!

CLI API Example for exporting, importing, and deleting different objects using CSV files (v 00.22.00...

This is a great set of scripts for migrating objects in and out of a Check Point R80+ management station using CSV files created by one of our SEs, Eric Beasley‌. Have you used them yet?

Did You Know...

You can control how often you receive email from the community?

We created a short video to explain how, which can also be viewed side-by-side with the captions here: Set Email Notification Prefs in CheckMates | fleeq.io 

Video Link : 5493

Feedback

You are of course welcome to respond to this post if you have questions! If you want to send something privately, you can send an email to [email protected] and we'll respond promptly.

Read more
2 0 917
PhoneBoy
Admin
Admin

This is the first of a regular series of posts highlighting activity in the CheckMates community during the past week.

I will also provide a tip that will help you make the best use of CheckMates!

Future posts (planned to be posted on Fridays) will be available here: https://community.checkpoint.com/blog/about-checkmates 

Community Highlights

Here are some highlights from the week's activity on CheckMates:

NotPetya: Under the Microscope Presentation and Recording 

This week, we did our first in a series of "CheckMates Live" webcast. Shortly after the webcast, we made the recording and slides available. However, unlike most content on CheckMates, this content requires you to be signed in to view it.

 

This is a new poll I created to see what versions of Check Point Management people are using and why. Everyone has their reasons for upgrading (or not). Vote and contribute to the discussion!

CPLogToSyslog Utility Now GA 

This tool, which had been available privately for a number of months, was recently released publicly. There was a question about whether or not BSD logging format was supported. Not by CPLogToSyslog, but via a process described by the following SecureKnowledge article: How to Configure R77.30 Security Gateway on Gaia OS to send Firewall logs to an external Syslog serv...

Centrally Managed Remote Access VPN with Embedded Gaia

There is no specific documentation on this topic because Embedded Gaia platforms are no different than regular Security Gateways when it comes to setting up remote access VPN.

Multiple ISP Redundancy will it support in R80  

This was an older thread that was brought to the surface recently when a customer wondered how to use the ISP Redundancy feature with more than 2 ISPs. The answer in this particular case will likely involve dynamic routing.

Did You Know...

You can use the Jive Daily app to access CheckMates from your mobile device?

While the CheckMates Community site is fairly mobile-friendly, some prefer a native mobile app.

You can download the Jive Daily app for iOS or Android as follows:

When prompted, enter community.checkpoint.com as the community and sign in with your User Center credentials.

Feedback

You are of course welcome to respond to this post if you have questions! If you want to send something privately, you can send an email to [email protected] and we'll respond promptly.

Read more
2 0 625
PhoneBoy
Admin
Admin

Many of you will probably recognize the name Barry Stiefel as the founder of CPUG, a well known independent Check Point community that still operates today.

I had gotten word a couple weeks ago from a mutual acquaintance that Barry Stiefel had passed.

Many of us (myself included) benefitted from work he did to inform, educate, and build community.

He will definitely be missed.

Here's a copy of his obituary from Google's Cache (the original article seems to have been removed):

Barry Jay Stiefel, 55, died of a heart attack at his home in Santa Clara, Calif., earlier this month.

A native of the Shongum Lake community in Randolph, during his school days, Barry was a member of his church youth group, sang, played piano and trombone, acted, played sports and competed on a state level in public speaking and math.

He became an Eagle Scout and worked two years as a reporter for The Randolph Reporter while still in high school.

Barry became fascinated by computers early in their development, receiving a scholarship from Carnegie Mellon University in the early ‘80s and eventually receiving BS and MBA degrees from the University of California at Davis.

After college, he became an expert in computer firewalls and network security. He lived in San Francisco for many years, managing his own business, developing teaching materials and traveling over the world leading seminars in his area of specialty. The past two years Barry worked for Palo Alto Networks in Santa Clara, Calif.

He enjoyed travel. Before college, he rode his bicycle across the U.S., traveling from Oregon to Kansas before a knee problem curtailed his trip. He spent a week camping at the bottom of the Grand Canyon. He visited over 1,000 counties in the US.

In another adventure, he set foot in all 50 states in the U.S. within a nine-day period, probably setting a record. He also flew from Singapore on the inaugural flight of Airbus A380, the world's largest airliner, in 2007.

In addition to his career, Barry was a fan of the San Francisco Ballet and Symphony. Barry also had a deep interest in linguistics and history of languages and was studying four languages.

Possessed of a wicked sense of humor, he had fondness for math puzzles, anagrams, palindromes, puns and spoonerisms. He liked to make people laugh and enjoyed sharing jokes and puzzles, something he extended into the publication of his recent book, "How To Win at Pentago: The Complete Visual Guide for Advancing from Beginner to Master in the Five-in-a-Row Board Game That’s Sweeping the World." He wrote and co-authored six books overall.

Barry lived every day with purpose and honesty. His legacy will be his kindness to many people – especially to immigrants – whom he helped find jobs, loaned money, taught to drive and accompanied to court and doctors.

Barry is mourned by his parents, Kenneth and Joyce Stiefel of Randolph. In addition to his parents, Barry leaves behind his sister, Holly June Stiefel, and his brother Brian, and Brian’s wife and two daughters. He maintained a special relationship with cousins and close friends. There will be a memorial service at a later date in the Presbyterian Church of Morris Plains.

Cremation was at Santa Clara Funeral and Cremation Service, 1386 N Winchester Blvd, San Jose, Calif.

Read more
1 0 3,674
Kyle_Reynolds
Employee Alumnus
Employee Alumnus

Welcome to the CheckMates Community! The purpose of this thread is to introduce yourself to the community. I'll start it off - I'm Kyle. I joined Check Point in August '15 and currently reside in San Carlos, CA. I'm the Community Manager here, so should you need any help or just want to share a suggestion, please don't hesitate to reach out!

Read more
10 66 49.4K