MyNetSec

This is a simple formula to calculate the mac-address for checkpoint loadsharing on multicast mode. This step is important as without configuring a static arp, most of the Cisco routers/switches that is interconnecting with the firewall cluster will not function. Taking the following formula into consideration: Divide the Ip address into 4 octets as follow: x.y.z.w If  y <=127 then the mac address will be 01:00:5e:y:z:w Simply convert the y:z:w from decimal to Hex example: 10.1.1.1 then the mac adress will be 01:00:5e:01:01:01 if y > 127 then the mac address will be  01:00:5e:(y-128):z:w Use the value for y minus 128 then convert them from decimal to Hex. Example: 10.157.1.1 then mac address will be 01:00:5e:(157-128):z:y = 01:00:5e:1d:01:01

Cluster related: To check on Firewall cluster status: cphaprob stat expected output: Cluster Mode:   Load Sharing (Multicast/SDF) Number     Unique Address  Assigned Load   State 1                10.1.1.2     25%             Active 2                10.1.1.3     25%             Active 3 (local)    10.1.1.4     25%             Active 4                10.1.1.5     25%           ...

Just some handy command guide on scheduling the checkpoint backup from the CLI backup [-h] [-d] [-l] [--purge DAYS] [--sched [on hh:mm <-m DayOfMonth> | <-w DaysOfWeek>] | off] [--tftp [-path ] [ ]] [--scp [-path ] [ ]] [--ftp [-path ] [ ]] [--file [-path ] [ ]] where: -d Show debug messages -l, --logs Back up log files         -h, --help Show this help information         -t, --tftp Transfer backup package to TFTP server -s, --scp Transfer backup package to SCP server         -v, --ftp Transfer backup package to FTP server         -f, --file Specify local backup package filename ...

If you are upgrading a non-production firewall, the step is much straight forward, Copy the upgrade ISO into USB stick. Plug in your USB stick and mount it to use. you can use the command /etc/dmesg to find out what is the drive your USB has been assigned. etc sda1, sdb1 Mount the USB with the following command: mount /dev/sbd1 /mnt/usb Change directory to your USB drive by: cd /mnt/usb and locate for your ISO file. Mount the ISO file as your cdrom. mount -o loop Check_point_R75.20_Smart_1.iso /dev/cdrom and issue the command: "patch add cd" to initiate the upgrading process

Ever wonder why Checkpoint firewall usually cost much more then comparable firewall??? I guess the following table give up pretty much a good detail of why do you have to pay a premium for that..