Categories
How-To Software Technical

Check Point Firewall: Disconnect VPN or Mobile Access Clients

If you have a need to disconnect a user from the firewall forcibly. There are a few ways I am aware of that will force users off the VPN. Installing Security Policy (link)-  clears the cached authentication of the remote user, although this doesn’t seem to disconnect them it prompts them to re-enter credentials. Expire […]

Categories
How-To Software Technical

ISP Redundancy Link Interface Cannot Be Created

While setting up ISP Redundancy on a Check Point cluster I ran into an issue preventing me from proceeding with my configuration.  I was eventually able to resolve this and felt that I would share with you and my future self the steps taken.   What is ISP Redundancy ISP Redundancy enables reliable Internet connectivity […]

Categories
How-To Software

Check Point: SmartDashboard crashes when editing Management server object

I recently had an annoying issue with my Check Point Smart Dashboard. Each time I connected to the Management with SmartConsole and editing the Security Management server object it causes an application crash. The crash would start with a UAC popup from the Windows registry: Followed by the Check Point SmartSashboard application crash itself with the following […]

Categories
How-To Technical

Check Point: Enable SSL Encryption for LDAP Accounts

Background: Check Point users faced an issue when they wanted to change their expired passwords when logging into to the VPN via the SecureClient. Although they had been prompted to change password their attempts were not successful. I did some investigation into this and discovered that SSL needs to be allowed for LDAP communication for […]

Categories
How-To Software Technical

Tech Short: Debug VPN in Checkpoint R77.30

The following tech short will provide a list of commands used to enable debugging in Checkpoint’s R77.30 Firewall. To start you must  SSH into firewall host (or active member). To turn on VPN debug from the expert mode: # vpn debug trunc At this point you want to test your VPN connection and verify that […]