Xavier BENSEMHOUN [english]

Check Point MIB chkpnt.mib and CHECKPOINT-MIB

2014-03-04T10:16:00.001+01:00

How to find the correct MIB for your Check Point products ?
Which version to choose among all CHECKPOINT-MIB files available on the Internet ?

Well the best MIB is the one that came with your product!
You'll be able to find it in the directory: /opt/CPshrd-R<VERSION>/lib/snmp/ and it's called: chkpnt.mib.

...where:

Check Point version	<VERSION>
R65 HFA_xx	R65
R70.x	R70
R71.x	R71
R75 GA / R75.10	R75
R75.20 / R75.30	R75.20
R75.40 / R75.45 / R75.46	R75.40
R75.40VS	R75.40VS
R76	R76

For example, on a R75.40, the following files are:

# ls -la /opt/CPshrd-R75.40/lib/snmp/
total 876
drwxrwx---    2 root     root         4096 Nov 14  2012 .
drwxrwx--x    3 root     root        12288 Nov 14  2012 ..
-rwxrwx---    1 root     root        25184 Nov 14  2012 chkpnt-trap.mib
-rwxrwx---    1 root     root       295284 Nov 14  2012 chkpnt.mib
-rwxrwx---    1 root     root       542821 Nov 14  2012 mib.txt

If you can, with your current version, use one or another new feature, the MIB that you'll find will allow you to monitor it.

How To - InterMapper Charts

2013-12-29T12:02:00.001+01:00

Zscaler Research: Aurora exploit still floating ...

2013-12-20T11:57:00.001+01:00

Zscaler Research: Aurora exploit still floating ...: It's been around two years since Microsoft released a patch for the IE 0day famously known as the Aurora exploit ( CVE-2010-0249 ). We...

Update: Blue Coat and Check Point Extend Partnership on High-End X-Series Network Security Systems

2013-12-18T13:55:00.001+01:00

Update: Blue Coat and Check Point Extend Partnership on High-End X-Series Network Security Systems

Do You Know What's Hiding in Your Networks?

2013-11-24T21:51:00.001+01:00

How to setup Zscaler for Native FTP usage ?

2012-08-23T17:40:00.003+02:00

How to setup Zscaler for Native FTP usage ?

Native FTP is only supported from known location.
All Zscaler FTP configuration is done under Administration -> Internet Gateways & SSL.
Please find below steps to setup Zscaler Native FTP:
1. Add your location
2. Enable FTP (this will enable both FTP over HTTP and Native FTP protocols)
3. Define categories which will have FTP access granted
4. Configure FTP client to connect our proxy (ie: gateway.zscaler.net) on port 21

Zscaler FTP proxy forward customer request to destination FTP server based on Username content.
USER <login>@<destination_hostname>
PASS <password>
Most of FTP client supports proxy confguration.

Zscaler Native FTP doesn't need specific Proxy login / pass credentials. By now, we authenticate customers based on their gateway location IP.
Copyright 2012 Zscaler Inc.

Concur: Two job offers

2011-12-02T23:34:00.001+01:00

My friend who's working for Concur toled me about this two job offers.

So if you're interested:

. Senior System Engineer

Job Overview:
The senior system engineer act as a technical reference on production environments for systems and applications layers. He coordinates changes and new services onboarding. He leads some medium to large scale projects.

. System Engineer II

Mission:
Au sein de l’équipe d’exploitation Informatique, vous intégrez l’équipe d'Administration ou vous aurez pour missions principales :
participation aux projets de refonte d'architecture et d’optimisation de la production
recette technique, intégration et mise en production de nouvelles applications
assurer la continuité de l’activité (monitoring, suivi de capacité), supervision
administration des systèmes Unix et Windows
collaborer avec les chefs de projet dans les phases de mises en œuvre lors des mises en production.

Do not hesitate ! :)

InterMapper 5.5 is available !

2011-11-09T22:46:00.001+01:00

InterMapper 5.5 is available !

Dartware has announced today the release of InterMapper 5.5.

We are happy to announce the release of InterMapper 5.5, now featuring enhanced analytics and device label control. The new InterMapper release makes further improvements to its industry leading monitoring and mapping capabilities.

To read the entire message published on their blog: http://blog.intermapper.com/?p=390
More details of this released: What's new et Release notes
The download link: Upgrade

... I cannot wait to test !...

"New InterMapper Probes" @ http://blog.intermapper.com/?p=360

2011-10-21T22:14:00.002+02:00

Just to say thank you to the Dartware team for their today's post: http://blog.intermapper.com/?p=360 !

(...)
We’d like to thank Xavier Bensemhoun of Rhapirou.net and Andrew Kee of Oakland University for sharing their custom built probes with us and the InterMapper community.
(...)

I'm proud to contribute to the success of InterMapper !

Coming soon: Ucopia, Citrix Netscaler & Alcatel-Lucent IPBX probes...

To be continued.

InterMapper SNMP probe for PaloAlto Networks / Panorama - version 1.1

2011-10-18T07:27:00.002+02:00

[pour la version Française: cliquez-ici]

Please find bellow a new version of my probe for PaloAlto Networks Panorama management console.

This last version is: 1.1.
Modifications were:
. Highlighting this blog's URL (the French URL)

You'll find below links to download the latest version and also the previous ones:
. known good_v1.1

This probe was sent on Wed, 19 Oct 2011, you can follow using this reference:
. Dartware Support Team: Dartware #100727
. InterMapper-Talk thread: msg06675

As usual, feel free to:
. Leave feedback and wishes on InterMapper-Talk list

or directly to me on my blog: In English

& En Français

. Use this as the basis for new probes

InterMapper SNMP probe for PaloAlto Networks / PA-x020 - version 1.2

2011-10-18T07:24:00.000+02:00

[pour la version Française: cliquez-ici]

Please find bellow a new version of my probe for PaloAlto Networks PA-x020 firewalls.

This last version is: 1.2.
Modifications were:
. Highlighting this blog's URL (the French URL)

You'll find below links to download the latest version and also the previous ones:
. known good_v1.2

This probe was sent on Wed, 19 Oct 2011, you can follow using this reference:
. Dartware Support Team: Dartware #100727
. InterMapper-Talk thread: msg06674

As usual, feel free to:
. Leave feedback and wishes on InterMapper-Talk list

or directly to me on my blog: In English

& En Français

. Use this as the basis for new probes

InterMapper SNMP probe for Fortinet Fortigate - version 1.2

2011-10-18T06:48:00.001+02:00

[pour la version Française: cliquez-ici]

Please find bellow a new version of my probe for Fortinet Fortigate firewalls.

This last version is: 1.2.
Modifications were:
. Highlighting this blog's URL (the French URL)

You'll find below links to download the latest version and also the previous ones:
. known good_v1.2

Please feel free to give feedback and wishes.

InterMapper SNMP probe for Check Point Security Management on OpenServer - version 1.1.1

2011-10-10T23:58:00.001+02:00

[pour la version Française: cliquez-ici]

Please find bellow a new version of my probe for Check Point Security Management installed on an OpenServer.

This last version is: 1.1.1.
Modifications were:
. Highlighting this blog's URL (the French URL)
. Fixing a bug regarding probe's headers.

The values of 'flags' and 'address_type' variables were wrong.

InterMapper didn't found those errors during import but used them anymore.
I informed Dartware' support team.

You'll find below links to download the latest version and also the previous ones:
. known good_v1.1.1
. known good_v1.0.1 *

*: I've updated all previous versions in order to apply the bug fix. So I add the suffix .1 to their version number.

Please feel free to give feedback and wishes.

InterMapper SNMP probe for Check Point Security Gateways on UTM-1 Series - version 1.4.1

2011-10-10T23:56:00.003+02:00

[pour la version Française: cliquez-ici]

Please find bellow a new version of my probe for Check Point Security Gateways installed on UTM-1.

This last version is: 1.4.1.
Modifications were:
. Highlighting this blog's URL (the French URL)
. Fixing a bug regarding probe's headers.

The values of 'flags' and 'address_type' variables were wrong.

InterMapper didn't found those errors during import but used them anymore.
I informed Dartware' support team.

             |         |               | + fix flag header
02 sep. 2011 |  1.4    | X. BENSEMHOUN | usage of HOST-RESOURCES-V2-MIB.mib instead of
             |         |               | V1 version (for ondemand table)
01 sep. 2011 |  1.3.1  | X. BENSEMHOUN | not include any more partitioning probe
             |         |               | some limitations on version < 5.6 :(
             |         |               | + some cleaning things
  
             |         |               | + 06 oct. 2011 update  
29 aug. 2011 |  1.2.1  | X. BENSEMHOUN | include Host Resources General Informations
             |         |               | (equivalent to 'SNMP Host Resources' integrated probe)
             |         |               | + 06 oct. 2011 update
24 aug. 2011 |  1.1.1  | X. BENSEMHOUN | include partitioning probe (using probe parameters)
             |         |               | + 06 oct. 2011 update
 23 aug. 2011 |  1.0.1  | X. BENSEMHOUN | complete layout
             |         |               | + 06 oct. 2011 update
16 aug. 2011 |  0.2    | X. BENSEMHOUN | implementation of all functions
19 aug. 2011 |  0.1    | X. BENSEMHOUN | Creation, first functions

You'll find below links to download the latest version and also the previous ones:
. known good_v1.4.1

. known good_v1.3.1 *

. known good_v1.2.1 *
. known good_v1.1.1 *
. known good_v1.0.1 *

*: I've updated all previous versions in order to apply the bug fix. So I add the suffix .1 to their version number.

Please feel free to give feedback and wishes.