Difference between revisions of "Check Point"
From Tech-Wiki
(→Endpoint) |
(→Gaia) |
||
| (19 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
[[Category:Check Point]] | [[Category:Check Point]] | ||
[[File:check_point_logo.png|thumb|200px|Check Point]] | [[File:check_point_logo.png|thumb|200px|Check Point]] | ||
| + | ==R80== | ||
| + | *[[Using R80 API to automate objects]] | ||
| + | |||
==Gaia== | ==Gaia== | ||
*[[Useful Check Point CLI commands]] | *[[Useful Check Point CLI commands]] | ||
| + | *[[How to grep Gaia configuration]] | ||
*[[Setting Proxy ARP entries for Manual NATs]] | *[[Setting Proxy ARP entries for Manual NATs]] | ||
*[[FW Monitor examples]] | *[[FW Monitor examples]] | ||
| Line 9: | Line 13: | ||
*[[How to move to a new RSA ACE server]] | *[[How to move to a new RSA ACE server]] | ||
*[[Top talkers]] | *[[Top talkers]] | ||
| + | *[[Extending log volume]] | ||
| + | *[[Using dynamic DNS based rules with Dynamic Objects]] | ||
| + | *[[Dynamic block rules for IPS events]] | ||
| + | *[[Export logs via Syslog]] | ||
| + | *[[Installing Jumbo Hotfix with CPUSE]] | ||
| + | *[[Performance Monitoring]] | ||
| + | *[[Performance Tuning]] | ||
| + | *[[Troubleshooting Tips]] | ||
| + | *[[Troubleshooting VPN]] | ||
| + | *[[Troubleshooting Identity Awareness]] | ||
| + | *[[Preventing cluster failover during policy install]] | ||
==Secure Platform== | ==Secure Platform== | ||
| Line 16: | Line 31: | ||
*[[Deleting logs older than nnn days]] | *[[Deleting logs older than nnn days]] | ||
*[[Creating email alerts within SmartCentre]] | *[[Creating email alerts within SmartCentre]] | ||
| + | *[[List public IPs in use (List NATs bound to interface)]] | ||
==VSX and MDS== | ==VSX and MDS== | ||
*[[Useful CLI commands]] | *[[Useful CLI commands]] | ||
| + | *[[Connectivity from VS0 and subsequent VS’s when communicating with the proxy for updates]] | ||
| + | *[[fw monitor to a vsx host]] | ||
| + | *[[Reset a VPN via script]] | ||
==Endpoint== | ==Endpoint== | ||
| Line 33: | Line 52: | ||
==External links== | ==External links== | ||
* [http://www.checkpoint.com/ Corporate website] | * [http://www.checkpoint.com/ Corporate website] | ||
| − | |||
* [http://www.opsec.com/ Open Platform for Security website] | * [http://www.opsec.com/ Open Platform for Security website] | ||
| − | |||
| − | |||
* [http://www.cpug.org/ CPUG: The Check Point User Group] | * [http://www.cpug.org/ CPUG: The Check Point User Group] | ||
| − | * [ | + | * [https://community.checkpoint.com/ CheckMates] |
| + | * [https://community.checkpoint.com/docs/DOC-2214-common-check-point-commands-ccc Common Check Point Commands] | ||
| + | * [https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111303 Best Practices] | ||
Latest revision as of 15:31, 20 May 2019
R80
Gaia
- Useful Check Point CLI commands
- How to grep Gaia configuration
- Setting Proxy ARP entries for Manual NATs
- FW Monitor examples
- Listing all tables on a gateway
- Checking and exporting a gateway's "connections" table
- How to move to a new RSA ACE server
- Top talkers
- Extending log volume
- Using dynamic DNS based rules with Dynamic Objects
- Dynamic block rules for IPS events
- Export logs via Syslog
- Installing Jumbo Hotfix with CPUSE
- Performance Monitoring
- Performance Tuning
- Troubleshooting Tips
- Troubleshooting VPN
- Troubleshooting Identity Awareness
- Preventing cluster failover during policy install
Secure Platform
- Changing a users default shell
- Enable users for SCP
- How to check if state sync is working on a Nokia vrrp cluster
- Deleting logs older than nnn days
- Creating email alerts within SmartCentre
- List public IPs in use (List NATs bound to interface)
VSX and MDS
- Useful CLI commands
- Connectivity from VS0 and subsequent VS’s when communicating with the proxy for updates
- fw monitor to a vsx host
- Reset a VPN via script
Endpoint
- Useful commands and log files
- Client cpda log blade mask values
- Checking client/server synchronisation
- Endpoint Security Management/Policy Server Synchronization
- Enable Debug Mode in SmartEndpoint