Try   HackMD

[隨手筆記] Check Point 功能設定

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
以下內容為皆為案件遇到內容，覺得可以記錄的小東西

Quantum Firewall

VPN流量統計(客戶詢問Report客製化無法呈現時發現的問題)
紀錄時間:2024/02/06

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
如果需要將VPN相關的使用者進行流量統計，需要特別開啟下面設定，才能夠在Log中看到流量，並且被Smartevent拿來使用，路徑位置在"SmartDashboard > Mobile Access > Logging"，基本上會使用的服務
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →

ABR設定(協助客戶設定發現幾個細節要注意)
紀錄時間:2024/04/02

  1. 在設定PBR的時候我們會選擇至少一項當作條件即可，但是在ABR的情況下，如果我們設定選擇Policy後沒有指定如來源、目的地等，就會無法順利生效
    Image Not Showing Possible Reasons
    • The image was uploaded to a note which you don't have access to
    • The note which the image was originally uploaded to has been deleted
    Learn More →
  2. 按照範例設定，我們只能選擇目的地是SaaS物件的才能控制，如果可以使用應用程式控管會更方便，但是實際測試發現無法實現，底層也會出現錯誤訊息，查看限制也有說目前ABR並無法使用Application Control的功能
    Image Not Showing Possible Reasons
    • The image was uploaded to a note which you don't have access to
    • The note which the image was originally uploaded to has been deleted
    Learn More →
    Image Not Showing Possible Reasons
    • The image was uploaded to a note which you don't have access to
    • The note which the image was originally uploaded to has been deleted
    Learn More →

IPS Profile有個小符號(客戶要解決VPN漏洞問題，想說確認IPS阻擋的時候發現的)
紀錄時間:2024/05/31

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
如果在IPS Protection發現設定上有個小符號，他其實是暫存的意思，會讓該CVE防護都是偵測的模式，而非阻擋模式，需要調整設定，或點擊按鈕清除快取

如果開啟這個功能才會出現

Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →

測試VPN案件發現的，在不同的加密演算法有不同的速率
紀錄時間:2024/07/23

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
如果選擇的加密演算法沒有按照SK73980設定的話，就有可能損失效率
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →
實際測試跟Cisco在建立點對點VPN時候，選擇3DES建立並傳輸檔案，發現速率為8MB/s，如下圖
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →
如果將加密改成AES-128以及SHA1的話，發現速率增加至15MB/s，如下圖
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →

Quantum Spark Firewall

測試客戶說SMB HA在Local模式下會無法立即同步問題
紀錄時間:2024/04/15

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
建立HA確認狀態完成後，設定SG-B(此時為Active)的Policy新增一條，此時登入SG-A的狀態只能看到設備資訊，無法設定。
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →
Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
進行切換後會直接看到Policy有更動過去
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →

建立HA發現CPU Core異常，透過指令調整成功
紀錄時間:2024/04/15

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
如果建立HA完成後，在cphaprob stat查看狀態發現告知corexl問題
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →
可以這篇文章SK174423 https://support.checkpoint.com/results/sk/sk174423 調整CPU Core，預設在1530為3 core、1550為4 core
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →
更改完成後查看HA狀態就正常了
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →

Quantum Maestro

調整Security Group成員後須注意(執行完PEP問題排除發現的問題)
紀錄時間:2024/02/06

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
如果遇到一些狀況，需要調整原來的Security Group成員，更動完成後都需要注意每一台的防火牆JHF是否都一致，否則會遇到Build版本不同，開Case的時候會被懷疑問題原因是這個
Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →

Harmony Email & Collaboration

顯示Internal Server Error原因(某次POC遇到的問題)
紀錄時間:2024/02/06

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →
如果在POC階段有出現這個，通常是有延長Lic的時候，並且後臺尚未完成全部的更新，因此會在執行某些功能設定時候，跳出這個錯誤訊息

Image Not Showing Possible Reasons
  • The image was uploaded to a note which you don't have access to
  • The note which the image was originally uploaded to has been deleted
Learn More →

Last changed by 
 
Teemo
0
275
Published on HackMD