🚀 go-pugleaf

"[-DVV-]" <raxie@bigfoot.com> wrote in message news:<3d8646c1$0$190$ba620e4c@news.skynet.be>...
> Hello to all CP techies.
> 
> I'am a student and i would like to know CheckPoint when I'am looking for a
> job.
> 
> Is there anyone who could explain to whole concept behind checkpoint.
> 
> Like, we have the checkpoint software and also hardware like Nokia. But do
> we always need a hardware piece to run a checkpoint firewall? Like I've
> download 2 CP CD's to install here on my PC to practice:
> CheckPoint.Next.Generation.V4.1.WinALL-CADMiUM but when I try to install
> CPFirewall1-50, the setup ask for Checkpoint Infrastructurs NG components
> (would this mean the hardware?)
> 
> So what I basicly like to know is the concept that CP is build on.
> 
> Anyone feels like helping me, or maybe know some good docs that could give
> me a hand???
> 
> P.S. What can i use for practicing checkpoint?
> 
> 
> 
> thx in advance !!!!


Ok,well, I've never work with the next generation of CheckPoint but
the last generation was preaty easy to work with (FireWall-1).
First:Do you have a firewall back-to-back
(WAN---firewall---DMZ---firewall---LAN) ? If not, then you should have
(WAN---FIREWALL---LAN).
Stay in mind that the info I'm giving you is from a fresh student who
had worked with firewalls (checkpoint,isa,gauntlet) and the checkpoint
that your are talking of is not the same version as mine (but I guess
the didn't change to much).
The Os that was use to install firewall-1 was windows 2000 server.
Nothing else, no other firewall hardware). When you install the
firewall-1, it will ask the registration number (serial number, key
number ... what ever). This number was usually given from the
manufacture linked to one of your firewall's mac adress. Then, you can
install the product.
Sec:If your firewall-1 is directly connected to your lan, then you got
to build in it (in your firewall gui) your network. So, if you got
let's say 3 sub-networks (192.168.1.0, 192,168.2.0 and 192.168.3.0)
then, normaly, you should have a router (linking the firewall and the
3 sub-networks). Firewall-1 should know all the network which it can
reach. When you have your network in checkpoint fw-1, then you can
inplement the ip spoofing. I forgot how to do so but, if my memory is
correct, it is under properties of the firewall's nic. Check the help
file in case.
Then you are ready to implement rules.
Hope it help a bit.