Search results for query: *

Hi, Couple of questions... 1. Is this single or distributed setup? 2. What OS is this running on IPSO, SPLAT etc 3. Can you see any ARP entries on the firewall for these NAT's

Hi try the following link: http://www.checkpoint.com/services/techsupport/hcl/testing_tool.html cheers Dan

hi, Did you run the Pre_Upgrade Verification Tool to confirm you hardware will work? just a thought.

Checkpoint is the firewall software which sits on either a windows box, SPLAT, Linux, Nokia box. Splat is the checkpoint OS which is basically Linux.

Hi wonder if anyone can explain this: I have run the HFA 08 for R55p on Ipso 3.8 and it seem to run fine and finished successfully.....but! ..when running fw ver -k it still says it's HFA_02. Has it not up graded? cheers

Just to update I found the solution to this. I had to disable the HTTP worm catcher in smart defense.

not sure is this is me or not but odd! I have remote clients connecting to the pix which works fine but when it comes to do name lookups it won't work (I know this won't so i'm not bothered at the moment as of routing etc.) My question is how then if i ping a device by name with the same ip...

Wonder if anyone can help me on this one, or point me in the right direction to diagnose the problem. Mac is trying to upload files to a web site using HTTP it can do a under 2mb fine but anything more it times out. How ever a windows machine is fine. Also if the Mac is using an ADSL line its...

Or you could update to FP3 and see if you have the same issue

You could check /var/log/messages then vi the log files to see if you see any errors.

Cheers for the reply stu

Okay all sorted I did a hit and run and it worked fine. It seemd to get the CA from the CMA. The certificate was created by the CMA and pushed to the firewall module. As long as i had the remote CMA setup for the mgmt it worked a treat.

okay see if you can answer this if I renew the CA will it: 1.contact the mgmt in the master list (public ip of mgmt off site) 2.or the ip address (which is a private address located off site)displayed in the CA certificated which is the privte local address. hope that make sense.

Can anyone tell me what steps should be taken to renew the CA for a firewall object as it has expired and causing Secure Clients from being able to login. Also if i do renew what connection problems will occure eg VPN connection etc many thanks Dan

This might help: The list below details the common ports used by Check Point Next Generation: 1. TCP 18211 (FW1_ica_push): The Check Point Daemon (CPD) process, running on the FireWall module, listens on TCP port 18211 for certificate creation and for the "push" of the certificate to the...

Hi all fairly new to this so here goes... I know in pervious version of checkpoint to use PPTP you had to create a static Nat to allow the vpn connection to work. Do you know if this has now been resolved in R60 or with hot fixes. Cheers Dan

Cheers I have a go andlet you know how i get on.... many thanks!

Okay people! New to this hello all! I'm ruining splat and Sqlnet2 is causing problems as it doesn't send any syn/ack's after the initial connection setup, but continues from the last port number so the firewalls drop responses as part of the anti-replay mechanism. I know you can edit the...