How to take the capture as pcap/wireshark formart in Checkpoint?

How to take the capture as pcap/wireshark formart in Checkpoint?

  January 13, 2019    Raj

---

How to take the capture as pcap/wireshark formart in Checkpoint? Let's say you need to view the capture in wireshark. In that case it needs to be exported. In order to export the capture we need to save it.   Syntx: tcpdump -nni interface_name host IP_address_here -w/location/name.pcap   [Expert@fw-checkpoint-raj:0]# tcpdump -nni eth2.2 host 10.197.112.5 -w/var/log/raj.pcaptcpdump: listening...

Read More

How to apply packet capture in Checkpoint?

How to apply packet capture in Checkpoint?

  January 13, 2019    Raj

---

How to apply packet capture in checkpoint? / How to apply tcpdump in Checkpoint firewall? For those of you who have been working on Cisco ASA, packet capture has been awesome thing so far and you really wish that it is available in every firewall. Well, it gets much easier with Checkpoint!! Really? Let's see then..... Like ASA, first thing we need to know is "On which Interface" we need a packet...

Read More

How to retrive expert password on checkpoint via CLI? Forgot my checkpoint expert password.

How to retrive expert password on checkpoint via CLI? Forgot my checkpoint expert password.

  November 28, 2018    Raj

---

This happened to me and I want to make sure I share it with you so that you can fix it by yourself. I forgot my "expert" password and needed to reset it. What you need to do is: login to the device with admin/root credentials: checkpoint-fw-raj> show configuration Run command "show configuration", look at the very bottom and look for this command: set user admin password-hash $1$6LgE8X45fg23987hgjsi34/234sak Now...

Read More

How to obtain config lock on checkpoint?

How to obtain config lock on checkpoint?

  November 28, 2018    Raj

---

Hello, I logged into my Checkpoint firewall via CLI and could see that it could not acquire the config lock because the lock is now owned by some other client. checkpoint-fw-raj>CLINFR0509  Could not re-acquire the config lock because the lock is now owned by some other client.CLINFR0509  Failed to maintain the lock. Command not executed. I need to enter this command: checkpoint-fw-raj>lock...

Read More