Hunting Malware Using Memory Forensics
CheckMates Toolbox Contest 2024
Make Your Submission for a Chance to WIN up to $300 Gift Card!
Harmony Endpoint:
Packing a Punch in 2024
CPX 2024 Content
is Here!
Harmony SaaS
The most advanced prevention
for SaaS-based threats
CheckMates Go:
The Difference Is In The Details
HeikoAnkenbrand
I have created an oneliner. It displays all current Endpoint Security VPN versions and users that can be found in the current firewall log. This should find all the old endpoint clients that are currently trying to log on to the firewall. To find all E8x.xx clients with the 01.01.2021 bug.
You can find more about the bug here:
- How to Remediate Endpoint and VPN Issues (in version E81.10 or earlier)
- IMPORTANT: Client VPN/Endpoint versions E81.10 or earlier – MUST UPDATE before January 1st 2021
Tested with Management Server R80.40. For other management versions, you may have to modify the $7 and $9 variables.
Executes this command on the management server. The command takes several minutes. Use the time and drink a coffee or tea:-)
fw log -n -p |grep "Endpoint Security VPN" | awk -F";" '{print $7 ,$9}' | grep client_version |sort | uniq
The output looks like this:
I have created an oneliner. It displays all current Endpoint Security VPN versions and users that can be found in the current firewall log. This should find all the old endpoint clients that are currently trying to log on to the firewall. To find all E8x.xx clients with the 01.01.2021 bug.
You can find more about the bug here:
- How to Remediate Endpoint and VPN Issues (in version E81.10 or earlier)
- IMPORTANT: Client VPN/Endpoint versions E81.10 or earlier – MUST UPDATE before January 1st 2021
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY
