I encountered this error today, where I was prohibited to delete a network object. The “where used” referred to the firewall object and the following context string: “interfaces->{F618DF02-1BE7-4A2E-AC7E-B22C44F1ED22}->security->netaccess->allowed” The solution, althrough a bit tricky to find, was very simple. The firewall’s anti-spoofing on the external interface was configured to not check packets with IP-addresses originating […]
Check Point have a nifty function called ‘ipcalc’ which displays network address, broadcast address, netmask and netmask prefix based upon input of an IP address/netmask. Could prove useful if you need to verify broadcast and/or network address. Syntax examples: ipcalc 192.168.0.0/24 -bpmn ipcalc 192.168.0.0 -m 255.255.255.0 -bpn Gos
If you issue the top or free command, you may be spooked and lead to believe you are out of memory and you start digging about checking the processes memory usage without getting any wiser. The reason being you and Linux using different terminology with regards to free memory, which I will try to explain […]
I came across an issue where the Check Point Security Gateway consistently stored the firewall logs locally as well as forwarding them to the Security Management server. As a result the /var/log partition reached 100%. Thinking this was the result of the Security Gateway having lost connection with the SM at some point (which makes […]
The error message “… out.tar: Cannot write: No space left on device” can be seen when running the upgrade_export migration utility. The upgrade_export migration utility fails due to a very simple fact – The system partition is not big enough to accommodate the out.tar-file temporarily created during the migration. Workaround There is however workaround. We […]
When trying to connect to the Security Management Server a warning read “The Fingerprint of the server SERVERNAME was changed.” …. “Do you approve the Fingerprint as valid?” This message is very typical when you for the first time connect to the SM using SmartConsole, but this particular SM had been operational for quite some […]
If you previously used E75.30 VPN-client and have installed Windows 8.1, you may be slightly confused as to which VPN-client you should use with your existing licenses. Remote Access Clients E75.30 does not have a planned release for Win8.1 and you need to move over to E80. The E80-train used to require its own management […]
This is a guide on how to increase your disk size on a Check Point Gaia Security Management node. Extending disk size is not supported by Check Point as far as I have gathered, so use the following guide at own risk – and as always; keep a fresh backup of your system. =) So […]
The process of separating a standalone installation could be broken down to a few high-level steps Do an upgrade_export of exisiting base and import it on a new server installed as both SG and SM (which will eventually be SM) Remove all security products on the standalone-object, leaving only management products enabled. Install database and […]
There is an odd issue occuring when installing GAiA on HP DL380p G8 with P420i Smart Array Controller. The installation is unable to find the drivers and none of the drivers on HP website work. The problem occurs when using the built-in DVD-rom and the solution is described in Check Points solution ID sk87704-article Solution: […]