Check Point NG VPN-1/FireWall-1

Static NAT Changes from 4.x to NG (FW-1 NG Operational Changes) (Check Point) Part 2

How It Really Works In the scenario diagrammed in Figure 1.8, a client wants to connect to the www.newyork.com server. Provided the DNS is configured properly, a packet is created with a source IP (SIP) of 4.3.2.1 (Client IP) going to a destination IP (DiP) of 38.1.1.3. Figure 1.8 Server-Side Static NAT Through the magic […]

Automatic ARP (FW-1 NG Operational Changes) (Check Point)

Next Generation adds the Automatic ARP configuration setting for Static NAT. This setting eliminates the need to create the ARP entry in the firewall operating system. This option is intended to overcome different nuances in the various operating systems on which NG is supported.The function of the ARP entry is to ensure that the router […]

Upgrading 4.x to NG (FW-1 NG Operational Changes) (Check Point)

Firewall administrators commonly have questions about upgrading to NG, such as: What versions can I upgrade from? What version should I upgrade to? Should I upgrade or rebuild? When will I have to upgrade? There are no absolute answers for every configuration. A great deal of confusion over whether or not to try and upgrade […]

Solutions Fast Track (FW-1 NG Operational Changes) (Check Point)

Static NAT Changes from 4.x to NG The new default Global Properties are configured to perform address translation on the client-side interface of the firewall for automatic NAT rules defined on the object. When Manual NAT rules are employed, the default setting in FP3 is to perform the translation on the client side of the […]

Frequently Asked Questions (FW-1 NG Operational Changes) (Check Point)

The following Frequently Asked Questions, answered by the authors of this topic, are designed to both measure your understanding of the concepts presented in this topic and to assist you with real-life implementation of these concepts. Q: What does the option for Allow bidirectional NAT on the NAT Settings page of Global Properties do? A: […]

SmartDashboard (Smart Clients) (Check Point) Part 1

Introduction With the introduction of the FireWall-1 NG product, Check Point has separated the new feature releases from the product fixes. With Feature Packs, Check Point is not simply providing "bug fixes" or "service packs," as the company did with its older software. Feature Packs (FPs) bring new features such as the new log management […]

SmartDashboard (Smart Clients) (Check Point) Part 2

New Menu Items and Toolbars The menus and toolbars in FP3 are completely restructured. In the 4.x interface, there was a single toolbar and status bar; in the NG FP3 dashboard, we have 12 toolbars and the status bar.The dashboard exploits all Windows GUI features to manage these toolbars. You may align the toolbars on […]

SmartDashboard (Smart Clients) (Check Point) Part 3

A GUI Overview of New FP3 Features Besides basic object and rule management properties of SmartDashboard, new tools and windows accelerate the daily life of an administrator. The new policy installation interface aims to remove the burden of policies on multiple firewalls by classifying the installation targets.The Sections feature simplifes the view of complex rule […]

SmartView Status (Smart Clients) (Check Point)

The new modular architecture of the Check Point base and all certified products can now be monitored to a greater extent. It is easy to notice the effects in the new SmartView Status: pane-based tabular screen organization, adjustable window sizes for panes, search functions, collapsible menus, and all-new interface gizmos are used in the new […]

SmartView Tracker (Smart Clients) (Check Point)

With the release of FP3, the firewall administrators are released from the legacy restraint of the old log viewer. All the GUI interface changes, which serve for a faster and better-organized desktop in SmartDashboard and SmartView Tracker, have been implemented in the new SmartView Tracker Client. This interface supports the three modes of log types […]