Thursday, March 31, 2011

SmartSPLAT - yet another SMART way to manage SecurePlatform

You are considered to be an expert if you can effectively work with SPLAT CLI. It usually takes knowledge and expertize to operate with fw monitor, kernel debug, and ClusterXL commands.

But is it indeed that complicated? Apparently not. There is a brilliant tool out there called SmartSPLAT.


It allows you just almost everything you might dream of: getting traces, collecting debug information, managing interfaces, preparing SCP transfer, changing cluster parameters, etc. The full list might actually take a couple of pages.

And can you imagine this tool is free of charge?

The author is Çağdaş Ulucan, and we all are grateful for his tremendous job.

Tuesday, March 29, 2011

Good word about me

Two my good friends and colleagues, Tobias and Robert surprised me yesterday by endorsing our new ATC in Lausanne on new and growing CPshared forum.

Thanks you guys for these warm words :-)

To remind you all, you can find our Check Point course schedule here.

Friday, March 25, 2011

R75 Multi Domain Management - changes in CMA migration

It worth mentioning that CMA migration has been changed since R71.

If you remember, the old way was to collect 5 folders ($FWDIR/conf, $FWDIR/database, $CPDIR/conf$CPDIR/database and registry) and then import the results with cma_import or through MDG.

Nowadays if you try this on R75 you will fail. New operation requires using migrate tool I have mentioned in one of my previous posts.

The process is documented in R75 Installation and Upgrade guide, page 114 and bellow.

In brief, you have to export CMA to .tgz file with migrate export command. The result file will be processes with cma_migrate script used in the command line.

To be fair, this path works from R71 already.

Thursday, March 24, 2011

UTM-1 and Smart-1 fail to reboot after upgrade to R71.30

I have seen something strange today. The customer has had three R71.10 boxes, two UTM-1s and Smart-1. All with original factory images, no funky business.

We have made a routine upgrade via WebUI to R71.30. All three appliances failed to reboot after being "successfully" upgraded. They were stuck with "loading" messages on LCD screens.

We only could boot them after shutting them down with power switch.

I have checked all forums I know and SK DB for this kind of failure I did not find anything relevant. Did you see this kind of issues, guys?

Monday, March 14, 2011

Our Check Point ATC web site is now online

It is my pleasure to inform that our ATC web pages are finally available online, thanks to DD corporate web masters.

Please feel free to browse them any time.

Courses schedule and description are also available.



You should be able to register and/or request additional details there, so please do not hesitate.

See you in my classroom!

Tuesday, March 8, 2011

Check Point reads my blog

I have got a call yesterday from Check Point Israel regarding my recent post about R65 to R71 upgrade failure.

That is sweet, guys. A nice "bachura" (hebrew for "girl" or "young woman") asked me for some details and even debug messages on the issue. I will try to get those, but the case is now cold, and the customer is taking another upgrade path.

I wish Check Point support did the same when I have called them.

Anyway, thanks guys, I can see some of my words are making through the filters.

Monday, March 7, 2011

R75 courses are almost here

Some sources inform that R75 instructor kits are now being distributed to Check Point qualified ATC instructors.

Instructor kit is a special books set with the course materials and instructor notes. It allows ATCs to prepare the courses.

Instructor kits are not available for sale.

If this is true, then official R75 CCSA and CCSE courses are to be available very soon.

Stay tuned.

Check Point visual release map

Hi all!


Navigating through multiple Check Point releases may not be easy. The usual questions are: when released, what's new, what is integration with previous releases.

Check Point seems to care about us, here is the visual release map link with PDF document describing all mentioned above.



Thanks, Check Point, I am impressed.