Management (R80.10) | CheckMates

Martin Vilim in Management (R80.10)8 hours ago (Show more)

Time sync problem on gaia Open Server in Hyper-V

Hello, I started with Checkpoint before 12 months, with Security GW (Open Server VmWare) and Smart. The Smart and management are installed on the same server. Gaia runs on Hyper-V Windows 2012 R2. The virtual server version is 1. On the revision R80.10 Take 42 I experienced huge problem with time sync. Because of incompatibility between Gaia and… (Show more)

1 replyShow more activity

Danny Jung (to Martin Vilim) 6 hours ago (Show more Show less)

In a Hyper-V environment, the Virtual Machine's clock moves faster than the hardware time because the Hyper-V clocksource does not work on 64-bit kernel (sk105862). Therefore Hyper-V integration services should not offer time sync. Uncheck this setting in the "Advanced" section of hardware properties of the Hyper-V VM. Check Point Support will…

Actions

Marco Huang in Management (R80.10)2 days ago (Show more)

objects are locked but there no sessions can be takeover or published

Management server running on R80.10. I've got some objects locked by admin, but checked Session table there are no active sessions holding them. I was using API to modifying the objects, few times the publish process was hung and "lost connection to API server". I then reboot the server. I guess this probably the cause... Does anyone have… (Show more)

1 replyShow more activity

Neil ZInk (to Marco Huang) 1 day ago (Show more Show less)

I came across the same issue. I had to reboot the management server to fix my issue.

Actions

Ekta Siwani in Management (R80.10)6 days ago (Show more)

Filter option in R80.10 show-access-rulebase API

Hi, I am trying to use filter option available in "show-access-rulebase" API available in R80.10. My code is in PHP. $rule_match_data = array( "offset" => 0, "limit" => 50, "name" => "Network", "filter-settings" => array("search-mode"=>"packet"), "filter" => "mode:{Packet} src:{122.34.22.56} dst:{192.168.12.21} svc:{80}… (Show more)

17 repliesShow more activity

Ekta Siwani (to kishore lal) 1 day ago (Show more Show less)

Hi, I have checked for range object with R80.10 API it's working for me. You can use postman to test different combination like just filter src field instead of filtering all fields.

Actions

Vladimir Yakovlev in Management (R80.10)2 days ago (Show more)

Failure while deserializing object

Have any of you encountered this message when trying to connect to the fresh installed R80.10 SMS from Smart Console (portable): Failure while deserializing object of type 'CP.Management.Objects.Schema.DleServerCoreSvc.LoginResponse'. Incidentally, while trying to look up this error on CheckMates: I have no problem connecting to the SMS… (Show more)

1 replyShow more activity

Vladimir Yakovlev (to Vladimir Yakovlev) 2 days ago (Show more Show less)

This seems to be specific to the "Portable" version of the Smart Console. The installed one is working normally.

Actions

Libin Thomas in Management (R80.10)3 weeks ago (Show more)

Checkpoint IP Pool NAT

Hi Folks, I am trying to do a NAT from Internal to DMZ servers , from internal subnet when it goes to DMZ servers the source should get a IP pool NAT address. Scenario From LAN side10.90.0.0 get translated at the firewall and gets a pool address in 192.168.90.0-255 range. Another workstation that connects from 10.91.0.0 gets a different… (Show more)

3 repliesShow more activity

Brandon Cotter (to Tim Hall) 4 days ago (Show more Show less)

Love your book dude.

Actions

Shared by Ashish Shah from Scalable Platforms1 week ago (Show more)

Adding-Removing Interface in ClusterXL R80.10

Hi, We have R80.10 running as Management server for ClusterXL on R77.30. Yesterday one of my team mate tried to add new interface to cluster via GUI first and than clicked "Get Interface" from SmartConsole. As per her, that changed everything for all interfaces including "Anti-Spoofing" settings and she has to backout changes. Any reason… (Show more)

Hugo van der Kooij in Management (R80.10)2 weeks ago (Show more)

IPv6 to TunnelBroker in R80?

Hi, Has anyone build a IPv6 setup in R80(.10) to the TunnelBroker of HE? I notcied that it didn't work and found these messages in /var/log/messages: netis_get_driver_info:Cannot get driver information for sit_6in4_2, Invalid argument If I ping the other end of the tunnel I get: icmp_seq=... Destination unreachable: Address unreachable I can… (Show more)

1 replyShow more activity

Hugo van der Kooij (to Hugo van der Kooij) 2 weeks ago (Show more Show less)

Ouch. This is silly. I put in too low a value for the TTL field. It turned out I need 10 hops to get to the tunnel broker. Deleting the interface with a TTL of 5 and setting it up again with a TTL of 15 solved the issue.

Actions

amith rao in Management (R80.10)3 weeks ago (Show more)

R80.10 Import fails with errors.

Upgrade Issue from R77.30 to R80.10 I have a fresh installed R80.10 management and I'm trying to do a migrate import of the file exported from the original management with R80.10 pre-80 upgrade tool. This procedure fails in the "Importing files..." step. The error produced in the migration log looks like this: Executing cpdb using the… (Show more)

2 repliesShow more activity

amith rao (to amith rao) 2 weeks ago (Show more Show less)

Hi Dameon Thanks for your help. I am current engaged with TAC, Looking forward for more suggestion and feedback's.

Actions

Paulo Aun in Management (R80.10)4 weeks ago (Show more)

Easy Way to create address range for https://ip-ranges.amazonaws.com/ip-ranges.json

I need to create an object network for the list of ranges Is there an easy way to create this list ? My firewall version is R77.30

6 repliesShow more activity

Hugo van der Kooij (to Paulo Aun) 3 weeks ago (Show more Show less)

For R80 I was able to cook a test PowerShell script: # # Download Amazon network Details # # (C) 2017, Hugo van der Kooij # # Don't forget to run `Install-Module psCheckPoint` (as administrator) once! # # WARNING: This script may put a significant load on your SmartCenter! # # Import Modules Write-Host " *** Loading Modules *** " Import-Module…

Actions

Mikesh Khanal in Management (R80.10)1 month ago (Show more)

Automate policy installation

1. I am planning to automate my Change requests and in order to do that I would like to know how could i use batch options for install-policy. The option I tried: [Expert@mapcpmgmt01:0]# mgmt_cli install-policy --batch policypackage.csv --format json Line 2: { "code" : "generic_err_invalid_parameter_name", "message" : "Unrecognized… (Show more)

3 repliesShow more activity

Mikesh Khanal (to Yonatan Philip) 1 month ago (Show more Show less)

Thanks Philip. Now, I have a real picture on how to use batch file and how to araange commands in CSV.

Actions