Browsing All Posts filed under »IPSO«

drops on IPSO interface

May 15, 2012

0

On IPSO the counter for packet drops is almost similar with the cisco drop counters. It is really detailed and can show us many kind of drops. To see if the number iof drops raises we have to check it 2-3 times when the issue arises. I guess with snmp we can monitor that value […]

Network topology with graphviz – Task 3.

March 20, 2012

1

Task 3. Create the input data for digraph: IPSO Firewall ‘clish -c “show route static”‘ output (filename: fw_static_routes_firewall1.txt): S 30.30.30.0/24 via 10.10.10.10, ae1c0, cost 0, age 6132971 S 40.40.40.0/24 via 10.10.10.10, ae1c0, cost 0, age 6132972 S 50.50.50.0/24 via 10.10.10.10, ae1c0, cost 0, age 6132973 S 60.60.60.0/24 via 20.20.20.10, ae2c1, cost 0, age 6132974 S […]

Network topology with graphviz – Task 2.

March 20, 2012

1

Task 2. List the interface name, the network address and the IP Address and the the DNS suffix. IPSO Firewall ‘clish -c “show route direct”‘ output (filename: fw_direct_routes_firewall1.txt): C 127.0.0.1/32 is directly connected, loop0c0 C 10.10.10.0/29 is directly connected, ae1c0 C 20.20.20.0/28 is directly connected, ae2c1 C 80.80.80.0/28 is directly connected, ae3c1 . # awk […]

Network topology with graphviz – Task 1.

March 20, 2012

1

Task 1. List the interface name, the IP address and the DNS suffix for the domain the IP belongs to. IPSO Firewall ‘clish -c “show interfaces”‘ output (filename: fw_interfaces_firewall1.txt): Physical Interface ae1 Up Logical Interface ae1c0 Active On link_avail Up Type i802.3ad IP Address Destination 10.10.10.1 10.10.10.0/29 Physical Interface ae2 Up Logical Interface ae2c0 Active […]

Network topology with graphviz

March 16, 2012

2

I am lazy that’s the truth, I will not paint with a microsoft Visio and not even with dia any networking topologies. It must be possible to do it with a program. A good question would be, how much time we need for a program and how much would it be if we would do […]

save and rotate backups

March 16, 2012

0

This is a really simply and of course my first script to copy firewall backups to a remote server and rotate the backups. – The script generate log files and list the files that were modified (copied or deleted). – The first part of the script checks on the remote server the old backups and […]

Backup the Firewall

February 16, 2012

0

The Firewall backup can be done manually day by day if we have sufficient work force or can be done automatically. In IPSO it is with the GUI and with the CLI very easy, but some question remains even if we read the official doks about it. I play again with CLI, if you need […]

IPSO upgrade on IP Appliances

November 25, 2010

0

On Nokia Firewall you have to install to things: – IPSO image – Checkpoint Firewall package The first one is the operating system, the second one is the firewall software. If you want to upgrade your operating system then you do not have to reinstall the Firewall software as well. Image upgrade is possible through […]

Checkpoint IP Appliance install only with CLI

November 13, 2010

0

I always look for the fastest way – CLI – if I have to configure something. That’s why I decided to try an Nokia Firewall install without any Browser and Java, those things makes the day really slooow. On IPSO it is possible to configure fast everything on CLI, on SecurePlatform it was earlier not […]

Checkpoint IPSO Password reset

November 12, 2010

0

We got a new Nokia Firewall I tried to login and the default username ‘admin’ with the default password ‘Password’ did not work. What comes in this case: Password Recovery. Checkpoint has already imported the Solution from Nokia Support, this is: sk41239 – How do I change the admin password when it is lost or […]