Check Point NG VPN-1/FireWall-1

SmartView Monitor (Smart Clients) (Check Point)

Seeing is believing. Check Point has an easy-to-use network-monitoring tool. SmartView Monitor, which is the FP3 marketing brand name of the previous RealTime Monitor, answers most enterprise monitoring needs of a mission-critical distributed Check Point deployment. Besides real-time monitoring, SmartView Monitor offers recording of sessions and historical views. With the utilization of system counters generated […]

User Monitor (Smart Clients) (Check Point)

If you need real-time monitoring for your remote access users, User Monitor is the tool for you. On a new interface, you will be able to view all your SecureRemote users currently logged on to specific policy servers, and you will be able to define queries and export your query results for reporting. This tool […]

Solutions Fast Track (Smart Clients) (Check Point)

SmartDashboard Object Tree makes it easier to access all objects. Authentication is more sophisticated with SmartDashboard.You can choose certificates or strong authentication. Administrator users can be defined from the SmartDashboard. There is no need for cpconfig. There are new GUI add-ons such as policy revision control and enhanced policy install windows. SmartView Status SVN-supported detailed […]

Frequently Asked Questions (Smart Clients) (Check Point)

The following Frequently Asked Questions, answered by the authors of this topic, are designed to both measure your understanding of the concepts presented in this topic and to assist you with real-life implementation of these concepts. Q: What is audit mode? A: Audit mode displays administrator-level activity in SmartView Tracker, such as policy changes and […]

Active Directory (Advanced Authentication) (Check Point) Part 1

Introduction "Who is coming through my firewall?" is one of the most frequently asked questions in our security space today. Managing access through FireWall-1 has not always been glamorous or even exciting. With NG, most of the issues relating to authentication and user management are diminished. Now managing users can be accomplished in a centralized […]

Active Directory (Advanced Authentication) (Check Point) Part 2

Enabling LDAP Over SSL When you leverage the security standards of AD, having all encrypted traffic is the first step. The traffic between Check Point SmartCenter and Active Directory should be authenticated and encrypted. To enable Secure Sockets Layer (SSL), follow these steps: 1. Insert your Windows 2000 Server CD and choose Install Add-On Components […]

Active Directory (Advanced Authentication) (Check Point) Part 3

Delegation of Control Administrator users do not have the privileges that are required to manage Active Directory.To change permissions to the user Administrator, use the following procedure: 1. Open Active Directory Users and Computers from the Windows 2000 Programs | Administrative Tools menu and choose Delegate Control (see Figure 3.22). Figure 3.22 Active Directory Users […]

Active Directory (Advanced Authentication) (Check Point) Part 4

Troubleshooting with Schema Masters There is only one domain controller for Active Directory schema. As explained, the schema master cannot be used in multimaster mode, and it may be referred to as an FSMO. To identify the schema master: 1. Open Active Directory Schema. 2. In the console tree, right-click Active Directory Schema and then […]

Active Directory (Advanced Authentication) (Check Point) Part 5

Setting Up the Firewall for AD Authentication Setting up your firewall for Active Directory is easier than 4.1 configurations. With the help of the integrated LDAP account management GUI, you need nothing but the SmartDashboard.The extended properties of the Account Unit object in VPN-1/FireWall-1 allow load sharing and high availability. On the other hand, it […]

Active Directory (Advanced Authentication) (Check Point) Part 6

Configuring LDAP Administrators Once you define your Active Directory unit and establish the connection to it, SmartDashboard becomes your user manager, or the Active Directory User Management console becomes your VPN-1/FireWall-1 user management console.Your changes on both consoles will take effect on the Active Directory database that is defined as your account unit. VPN-1/FireWall-1 assumes […]