Nokia IPSO Checkpoint CLI Commands
0.0 CCSA R80 CBT Nuggets
0.1 Checkpoint Backward Compatibility Map
0.2 Checkpoint Firewall Packet Flow
1.0 How IPsec Site to Site VPN Tunnels Work
1.1 Remembering the 5 Things to Negotiate in IKE Phase 1 (IPsec)
1.2 How to Set Up a Site-to-Site VPN with Check Point Gateways Managed by the same Management Server
1.3 How to set up a Site-to-Site VPN with a 3rd-party remote gateway
1.4 Checkpoint Site to Site VPN (R80)
1.5 Site to Site VPN (R75/R76/R77)
1.6 3rd party VPN/Invalid ID information/No valid SA (Summary subnet sent)
1.7 VPN Debugging Commands CLI
2. Connection to the Security Gateway with WinSCP fails
3. Check Point – How To Collect CPinfo – CLI
cpinfo -l -z -o /var/log/FW01_2_6_2020_15_50.info.tar.gz
5.0 Building a Checkpoint Network
5.1 Checkpoint Management Server Installation
5.2 Checkpoint Security Gateway Installation & Adding to Mgmt Server
5.3 Interfaces Configuration and Default Route
5.4 Basic Security Policy and NAT
5.5 Checkpoint Security Policy Rules
5.6 Checkpoint NAT – Part 1
5.7 Checkpoint NAT – Part 2
5.8 Checkpoint Installation/SIC/Basic Setup
6.0 Basics of SmartView Monitor
6.1 Checkpoint Smartview Tracker Logging
7.0 Checkpoint Failover doesn’t work on Azure
8.0 Checkpoint Log Collection (LogRhythm) (OPSEC LEA)
8.1 Syslog Integration with CheckPoint
9.0 Port Scan Best Practices Checkpoint
9.1 Port Scan and DDoS Best Practices Checkpoint
10.0 Power Shell Script to create objects from list of IPs (Dbedit)
10.1 Using a dbedit script to create new network objects and network object groups
10.2 Checkpoint Firewall CLI tool “dbedit” and quick lab examples
11.0 Capture and Monitor traffic Checkpoint (CLI/Commands)
12.0 Adding/Renewing a new 3rd party VPN Certificate Checkpoint – Step 1
12.1 Adding/Renewing a new 3rd party VPN Certificate Checkpoint – Step 2
13.0 How do Domain Objects work?
13.1 Domain Objects in R80.10 and above
14.0 New R80.20 Commands
15.0 Route all traffic from Remote Access clients, including internet traffic, through Security Gateway
16.0 Restrict Smartconsole and SSH access to the Management (user cpconfig or edit file)
17.0 Check Point Upgrade Service Engine (CPUSE) – Gaia Deployment Agent
18.0 Video Lectures
18.1 ClusterXL/CoreXL/SecureXL
18.2 CCSE Commands List
18.3 Checkpoint Common Ports
18.4 CCSE R80 Syllabus
19.0 Configuring DHCP relay through Site-to-Site VPN on GAIA embedded Appliances
20.0 How to troubleshoot IPS update [scheduled and manual] issues
21.0 Domain Objects in R80.x FQDN and non FQDN
22.0 How to import multiple objects into R80.x Management database using .csv file and then add them to a group
23.0 Connectivity problems between the Security Gateway and the Log Server
cpstat fw -f log_connection
24.0 Checkpoint VPN Troubleshooting (Overlapping VPN)
25.0 Shows Visitor Mode users
26.0 Checkpoint Evaluation License steps (cplic)
27. ClusterXL HA Manual Failover
28. Remote Access VPN users count
Best Practices:
SD-WAN:
Network and CyberSecurity Professional 