Questions tagged [check-point]
A family of security products produced by Check Point Software Technologies. Check Point includes both security gateway and end point products.
10 questions
0
votes
0
answers
582
views
In IPSec, what block cipher mode of operation is "AES-256"?
Multiple IPSec implementations I've run across support "AES-256" as an encryption algorithm. (pfSense has this, Checkpoint has this.)
What block cipher mode of operation is this?
- 1,096
0
votes
1
answer
241
views
HTTPS inspection and TLS certificates
I have some difficulties wrapping my head around the following concept:
When HTTPS inspection (outbound) is enabled on a NextGen Firewall (NGFW) e.g. CheckPoint, a certificate has to be installed on ...
- 38
1
vote
1
answer
2k
views
Topology Configuration on CheckPoint
On CheckPoint firewall (R77), in the Topology config. section that is used for anti-spoofing, is it possible to configure 2 different External interfaces?
I have already an interface configured as ...
- 145
0
votes
1
answer
2k
views
PCI Compliance with scanned checks? [closed]
Client want's to store scanned checks on his publicly accessible server that is NOT PCI compliant.
I told him it's a bad idea.
I need to present him with the laws / FTC guidelines / government ...
- 879
3
votes
3
answers
255
views
BlackHole Toolkit v2 JAVA Payload Stage Code Execution - What does this activity mean?! I cannot get hold of the owner of the server to check
An analyst came across this alert - BlackHole Toolkit v2 JAVA Payload Stage Code Execution from the Checkpoint IPS coming from a server, the event is recorded as a blocked outgoing connection attempt -...
- 31
2
votes
1
answer
765
views
Check Point SSL Certificate Interception [duplicate]
Can someone please explain how Check Point enterprise firewalls are able to read SSL traffic? My boss briefly explained that our company's firewall, which is Check Point, is able to intercept SSL ...
- 21
1
vote
1
answer
2k
views
Is there a supported way to run a custom log export script at boot time in Checkpoint's Gaia OS?
Specifically, we're using fwm logexport piped to logger to dump the audit logs in real time via syslog to our SEIM. It works great if the command is run manually (in the background) from the "expert" ...
- 113
3
votes
2
answers
1k
views
VPN Appliance Placement Options
I'm currently looking to implement a VPN solution (based on a Checkpoint Connectra) purely to provide remote access to staff (no site-to-site, or customer access), but the one design decision I can't ...
- 358
0
votes
1
answer
5k
views
i, I, o, O packet inspection points inside a Check Point firewall
In a Check Point firewall, can you please explain what occurs between the POSTIN (I) and PREOUT (o) inspection points?
- 1,560
1
vote
1
answer
1k
views
Client access to domain controller
I'm working on a solution to identify if a machine is a member of the domain or not. We are using Checkpoint R75 Identity Awareness with two possible methods to retrieve machine identity.
AD Query to ...
- 5,817