Show
31 - 40 of 35,568 discussions
Sorted by:

Checkpoint Next Generation FW: R80.10 Aggressive aging: enabled Virtual session timeout: 3600(s) We have a long-lived TCP connection over the Checkpoint gateway firewall. After 1 hour of idle, t...
-
You can't have the Check Point send a FIN upon state table connection timeout, but you can have it ...
- Will not work reliably if you upgrade to R80.20 and higher. Keep this in mind.
- This will not work for accelerated connections: fw_rst_expired_conn So if you have Secure...
- Thanks for your answer Tim. If i might ask... i find sk19746 a bit confusing. If i read the SK i se...
- I wanted to add the solution to my own problem and I will like to share it with you. It can be help...
- I have had a same sort of issue. We have a customer who had a problem with an application that was ...
- option 3 (first part "fw ctl set int fw_rst_expired_conn 1") solved it. Thanks for you explanation...
- With option 3 (sk19746) enabled, I am looking for the best way to verify the option is working. I h...
- This is also what we suspected. Thank you very much for your thorough explanation.

I have 5600 appliance running on Gaia R77.30 that is behind Sophos IPS and Sophos IPS is in bridge mode. I am installing all latest hot fix but issue is still same some website is not accessible and...
-
If I'm understanding your reply correctly, you are removing a Sophos firewall and trying to replace...
- Dear Timothy Thanks for your response its work for me.
- Dear Timothy Thanks for your response i am trying all these step but issue is still same i am al...
- You might need to start by traffic captures and check the traffic flow after that you might start l...
- Please see my response in the thread below for guidance about how to troubleshoot this message: ...

Hi, I am having a problem with uninstallation of EPS client that got stuck and now when anything that has to change the old files it prompts for the uninstall password and that is removed... Our ...
-
You can try the solution from sk118233 "Error: 27557" when removal of Endpoint Security Client fail...
- "To view this solution, Advanced access is required." Can you write solution here?
- Thanks, that was the solution for that but i think i have found the base problem that started this....
- Not sure what your options are if you've forgotten your uninstall password. I recommend checking w...

Hey guys,
I know there were few posts about this before, but here is what Im looking for. I know many methods you can check the status of the tunnel itself, with tcpdump on proto 50, vpn tu options...
-
Here are the sk sk63663 you can simply use any NMS or I am using open source like check_mk and...
-
Hey guys, Just to give a quick update on this. Talked to Tier 3 guy in DTAC and what I was inform...
- Just in case, AFAIK, only permanent tunnels can be SNMP monitored.
- I believe thats the case, yes.
- I did this while ago and worked fine...let me see if I can find exactly how. Andy
- Can we talk with mail?
- Can u help me with configure checkpoint vpns with check_mk?
- Are you asking about how to add devices in check_mk? or any specific OID? You just need to enable...
- Sure, but all you need to do is what @Blason_R advised and it will show up in check-mk. ...

Hi CloudGuarders,
I'm happy to announce 2 exciting EA programs that we launched for CloudGuard AppSec!
AppSec as a Service
We are thrilled to unveil the Early Availability release of our dis...

Hi
As you can see the web page www.superporn.com only as an example, many other porn websites bypassing the same!
was blocked only for 2 logs and then it was acce...
-
Just to share with the community... it looks like a SK was published regarding this issue with chro...
-
Atleast part of the answer is in the log output provided. QUIC traffic is allowed in your environ...
-
By any chance the issue is occurring only on Chrome/Edge browser just recently? We have a simila...
- We only have HTTPS categorization enabled on R80.20.XX and R81.10.XX on locally managed SMB firewal...
- I did blocked QUIC:
- You need to make an exception in https policy.
- Here are my firewall stats: Accelerated conns/Total conns : 161/53539 (0%) LightSpeed conns/Tota...
- It's not specific to the sites rather QUIC more broadly, there is an SK that describes the need to ...
- The issue will likely persist to a degree if you don't also handle the QUIC traffic.
2024-04-29
07:31 AM
61
Replies
47451
Views

Not that you really need to use this often but it has saved my day once or twice a year. Great SK103876 is available but in a stressful situation calculating HEX numbers is the last thing you want to...
-
still gold (works on R81.10.15 as well)
- Haha it still lives after 7 years! Awesome 🙂
- Im sure this method will be used by many for long, long time 🙂
- I have to say I had given this post link to so many customers and they were all impressed. In my op...
- After this threat pops up again I need to add something 8) I loved your script in the past, but...
- Colleagues, please help me to adapt this wonderful one-liner to solve the task of removing all UDP ...
- Going through my bit buckets of useful Check Point stuff, here's a version I wrote that validates t...
- Aaaand for those out there still upgrading your SMS/MDS from R77.30 who have just implemented the n...
- wow! its still alive after 5 years! haha

In R77.30 i need enable the CTR or GCM cipher mode encryption instead of CBC cipher encryption, Please some one help me to fix this issue.
-
You can change the enabled SSH ciphers in the following files: /etc/ssh/ssh_config /etc/ssh...
- Hi All Expert, I google on the same issue as well but i still not able to solve this, is there any...
- This is just the same behavior as on any other Linux/Unix box with OpenSSH, as long as we are not t...
- Hello, thanks for the info. I just checked both files and there are no Ciphers listed in the ...
- Thanks a lot for taking the time to explain. We are in the process of upgrading to R80.40 but just ...
- It would be exactly the same configuration as you would do on a standard OpenSSH, which I assume wo...
- DESCRIPTION The SSH server is configured to support either Arcfour or Cipher Block Chaining (CBC) ...
- Look here to be able to see them at least: sk144632: How to see the supported ciphers and HMAC...
- R77.20.80 for Small and Medium Business Appliances removed unsafe ciphers/HMACs from SSH serve...

Hello, I tried to install Remote Access VPN, latest available version (E88.40) on laptop running Windows 11 Enterprise 24H2, build 26100. Build 26100 is an upcoming 24H2 release that is already ava...
-
Thats right. Here is the official sk about it. We actually have a case with TAC T3 about it. Andy...
- Hi Bruno, Did you open a ticket as well? If so, did you manage to get a solution working? I'm stil...
- My apologies, sorry, did not realize thats what you meant. For that, I would double check with TAC....
- Still working with TAC on the issue. They are unfortunately still not able to understand the issue ...
- Hi Lau, I also opened a ticket and the reply I got is not conclusive because CHKP support was poin...
- We have also been down the DNS issue hole with TAC. We have a separate lab gateway that we can test...
- Hi Lau, I'm facing a similar issues. Did you manage to resolve your issue? Thanks BR
- Did you follow instructions from the sk? I attached how the file needs to be edited, all you have t...
- Hi, Thank your the fast reply. I did follow the sk instructions and for endpoint clients works pe...

As you may already be aware, Check Point CloudGuard Network Security announced its integration with Azure Virtual WAN and specifically the new Routing Intent feature recently.
This new integration ...