CPUG: The Check Point User Group

[...] on how to solve it and especially to clarify the way behind. Customer_A wants to establish a VPN Tunnel with Hoster_B. Hoster_B has a policy where he does not allow any RFC1918 IPs for VPN Tunnels [...]

[...] firewalls one is CP and other is Fortinet; i have installed VPN R77 Gaia and created a vpn tunnel. The encryption domain I have behind Firewall A is 10.20.0.0/24 and other side I have [...]

[...] cluster is not in our house but in a datacenter. So he's only accessible via the Internet or a VPN tunnel when working. He is connected with our standalone FW via VPN. I would be glad if someone has a [...]

[...] .11.11 internal single: 192.168.1.1 dmz single: (several, not applicable) Does not work (VPN tunnel fails) external cluster virtual: 11.11.11.11 internal cluster virtual: 192.168.1.1 dmz [...]

[...] trying to install R77 Gaia on open server with multiple NICs and the issue I observed is IP addresses keeps getting changed after every reboot and becasue of that I need to keep moving the [...]

[...] a dedicated checkpoint cluster. My question : I will have to setup this cluster with the same ip addresses (we won't plug the cables of course ;) ), so when I will discover my interfaces on [...]

[...] fw. I was planning on building this 2ndary cluster aside of the main one, with new admin ip addresses, but keeping the same upper and lower ip addresses, and activating network interfaces [...]

[...] that Auto Static NAT on address range object should have an option to provide range of NATed IP addresses, not only one IP. I'm using Gaia R75.40 and I've attached screenshots. Are there any way of [...]

[...] management appliance to R77.10 by way of the following: 1) WEBUI upgrade from R75.40 SPLAT to R77 GAIA 2) upgrade_export using R77 tools 3) Fresh install of R77 GAIA 4) upgrade_import using R77 tools [...]

[...] Hi guys! I have two 4400 Secure Web Gateway appliances running r77 gaia in full-ha cluster. I want to upgrade them to r77.10 gaia. So I downloaded an update package, [...]

[...] Hi Guys, I am trying to install R77 Gaia on open server with multiple NICs and the issue I observed is IP addresses keeps getting changed [...]

[...] I am testing Application Control and the User Check agent works really nicely on Windows desktops. However I cannot find any [...]

[...] since some bypass the policy rule. Has any of you guys ever implemented such a rule in the application control & url filtering policy? Please feel free to throw any ideas you have. Thanks Attached [...]

[...] Dear Friends, in the application control, I have blocked UltraSurf but users are able to use Ultrasurf. How do I block Ultra Surf [...]

[...] Hi Guys, I am facing some error while executing patch add cd on management server. [Expert@server1]# patch add cd Choose a patch to install: cat: /mnt/cdrom/SecurePlatform/ [...]

[...] Pack 1. when attempting to connect with an IP that has been defined in GUI clients on the management server, SmartDashboard gets to the "Loading application data" message and then crashes. [...]

[...] We have two clusters (r75.40 Gaia), one is sending logs to the management server just fine, the other stores them locally. We have checked the cluster object settings in [...]

[...] , not applicable) Another bit of information. Once we revert, the static NAT on our management server fails until we reboot the external Cisco 2960 switch all the gateways are connected [...]

[...] site-to-site IPSec VPN tunnels configured. I want to change the IP address assigned to the cluster object but I am fearful it may break the IPSec VPNs. I can see that the gateway IP address forms [...]

[...] it in smartdashboard, all choices regarding smartevent on the "Management" tab of cluster object are grayed out. How can I set up smart event? Thanks in advance! [...]

[...] policy without any issues however when I configured the second cluster member, created the cluster object and pushed the same any any accept policy it fails and breaks the cluster. The initial [...]

[...] upgrading my gateway to R77.10 from R75.46 This is a cluster member. I have changed the cluster object to R77.10. I have remove and put the gateway back into cluster to no avail. i have [...]

[...] is "reject" Accepted Packet Rate - This represents packets that were accepted by firewall rules Does this sound right? [...]

[...] ...d.htm?ID=11743 # we need 3 steps in creating a succesfully firewall rule from gui. # Firewall rules CAN be created without defining network objects and service objects, but to keep things [...]

All, I have been tasked to find out the best way (if possible) to write rules based on domain (ex. *.intuit.com) without taking a major performance h [...]