Packet Flow in Checkpoint Firewall

-

How Does the Pakcte Flow in Checkpoint Firewall?

SAM Database (Suspicious Activity Monitoring)

Address Spoofing

Session Lookup

Policy Lookup

Destination NAT

Route Lookup

Source NAT

Layer 7 Inspection

VPN

Routing.


Above is the various activities the cpaket is subjected to once a packet reaches a Checkpoint firewall. 

Comments

Post a Comment

Popular posts from this blog

Chrome how to delete a Auto Fill Suggestion

-
Image
You might have entered a wrong value in username or address or any field you have to fill in a website in Chrome. And once filled and moved to next page, every time you go back to the same page it always suggests the wrong or previously filled value which you might not need now.  I encountered this issue where I was not knowing my AWS website login username,  so I had tried many combinations and I used AWS website not so frequently and had many times tried using different usernames and all had been stored in history. So after few months if I come back to the website the suggested usernames were many, I again landed at square one where I had to again remember or search through emails to identify my correct username. Tried many ways to delete the auto fill suggestions, previously used usernames so that it does not show it again and should only show the one that is correct.  I got lot of suggestions to delete the Autofill form data from History, option shown below. However t...
Read more

Google Pixel and Moto and Android 11 Phones WIFI Connection issue with Corporate Enterprise Aruba WIFI.

-
Image
We have seen since some time that with Aruba WIFI infra in offices Google Pixel phones basically above Pixel 3a and Moto phones with Android 11 and also Moto G4 Plus running Android 8.1.0 are unable to connect to WIFI. We receive the error message as “Authentication problem" or “Access Point Temporarily Full”.  Why the issue is caused is  explained in the below articles.  https://www.xda-developers.com/android-11-break-enterprise-wifi-connection/ The solution to these issues are given in below article by google.  https://support.google.com/pixelphone/answer/2844832?hl=en  The usual step we follow is to select DO Not Validate in the CA certificate option while trying to connect to Corporate WIFI from other phones. However this is grayed out in these phones.  Steps to be followed. Download the certificate from Aruba central, you can do the same by following the steps in below article. From GUI, I did not see the download option. You can further...
Read more

QoS Not Installed Error Message in Smart Console on Checkpoint Firewall

-
Image
We might encounter the error message "QoS Not Installed" on Smart Console on Device Information in status info of Checkpoint Firewall Gateway. Usually installing the policy on the cluster or gateway would resolve the issue. However sometimes the error message continues.  In that case kindly verify if QoS is ticked in General Properties in Gateway or Gateway cluster properties. Even if you tick the QoS in Device information window and keep installing the policy it does not disappear and shows the same error message. We all do a common and basic mistake here while installing the policy in the installation window make sure to keep the QoS ticked as shown below or else any change on QoS would not take effect. Tick the QoS install the policy your issue should be resolved post installation.   
Read more