My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. In this example the syntax used is the "Checkpoint" method. FileZilla Open FileZilla Edit-->Settings...-->FTP-->FTP Proxy-->Click Custom-->Enter the syntax below: USER %u@%s@%h PASS %p@%w Fill in the following: Proxy Host - 123.123.123.123 Proxy User - NTID Proxy Pass - NTPass Click OK to get to the main screen again. Fill in the … [Read more...]
Blue Coat – HowTo Set Up A Policy Trace To Debug Access Issues
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. Problem Description: Policy tracing is primarily used when debugging access to web sites. When something is allowed and it should be denied, or vice-versa, using the policy trace feature is the best way to diagnose the issue. Resolution: Enabling a policy trace Open the “Configuration” tab, expand “Policy” radio button Launch the visual policy … [Read more...]
Check Point Firewall – Nokia IPSO CST Hanging or Taking Forever?
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. Is your Nokia IPSO CST Not finishing? Trying to run a CST on your Nokia, but seems to be taking forever? I have had the same issue on various Nokia security appliances running on IPSO 4.2 and older. The problem ended up being hung process that was spawned by the CST program. It seems that CST calls "fw tab -u -t", and sometimes it just gets hung up, but will look to … [Read more...]
Check Point Firewall – Detect SSH over Non Standard Ports
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. Many enterprises deploy proxies these days, but many are not aware that if they are not configured correctly they may be allowing SSH over Non Standard Ports, giving a tech savvy employee the keys to exploit this fault. Most times this is SSH over HTTP/HTTPS, but can also be over other ports, which is less common. Blue Coat proxies detect and drop this type of activity by … [Read more...]
Check Point Firewall – Interfaces Reordered Upon Upgrade
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. A few days ago, one of our Check Point IAS M6 Firefly equiped, R70.20 Splat clusters, had a member fail due to "PLANAR VOLTAGE FAILURE", so says the IBM iLO event log. Since this is not solved by a simple power supply replacement, so an RMA replacement unit from Check Point was obtained. The new device came pre-loaded with R65 and no HFA's or hotfixes. So we distributed … [Read more...]
Blue Coat ProxySG – ICAP, deferred scanning, and data trickling
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. Recently I was digging into a BlueCoat ProxySG / ProxyAV setup for ICAP and noticed some things that had room for improvement. Not a major overhaul, but some things that were missed from the best practices guide that just so happened to be causing a bit of an issue. Below is part of the small case study I completed to explain the options and differences between them, as … [Read more...]
Blue Coat Proxy – test http get
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. When troubleshooting user internet connection issues with a specific URL, that are returning the very unhelpful Blue Coat “TCP Error" message, I normally pop into the Blue Coat ProxySG appliance and run a test from the appliance to the URL in question. I will log into the ProxySG appliance via SSH, and issue the 'test http get' command below: test http get … [Read more...]
Blue Coat ProxySG – CLI Commands
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. Here is a list of Blue Coat ProxySG CLI commands, that I have compiled from my studies, Blue Coat documents, and places around the web. This is by no means an exhaustive or comprehensive list, but is rather meant to be a command line KB of sorts - mainly for my quick reference. The list is split into standard and privileged mode commands. If the list proves useful to you, … [Read more...]
Check Point Firewall – SPLAT CLI Commands
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. Here is a list of SPLAT CLI Commands commands for Checkpoint Secure Platform, that I have compiled from my studies, checkpoint documents, and places around the web. This is by no means an exhaustive or comprehensive list, but is rather meant to be a command line KB of sorts - mainly for my quick reference. The list is split into CP and FW commands. If the list proves … [Read more...]
Blue Coat ProxySG – Creating A Splash Page
My Engineering Years: this post is from my early hands-on infrastructure days, kept for reference. See the rest of this era. There do not seem to be many up to date resources regarding the building of BlueCoat splash pages, or exception pages. Even the top Google search will point you to a BlueCoat document (578) that is dated "v3-0609" for June of 2009, or to another BlueCoat document (8577) that are pretty stripped down and provide only the bare essentials of user notification. Not to mention … [Read more...]