Danny Jung

• CTO at Check Point 5-Star Partner ESC
• CheckMates Champion 2018, 2019, 2020, 2021 & 2022
• Speaker at CPUG 2008 & 2013
• Speaker at CPX 2019, 2020, 2021, 2022 & 2023
• Presenter at Check Point's Cyber Security Summit 2020 ..
• Referenced in Max Power 2020 book & Max Capture Training by Timothy Hall
• Referenced in Firewall Administration book by Vladimir Yakovlev
• Referenced in official Check Point Maestro Expert (CCME) R81.10 courseware (Badge)
• Tools recommended by Check Point (sk166032, sk164155 ..)

Common Check Point Commands (ccc) includes these one-liners:

• Address Spoofing Troubleshooting
• Show VPN Topology on Gateways
• Show Geo Policy on Gateways
• Show number of permitted CPU cores
• FW Monitor SuperTool - Showcased in Magnus Holmberg's YouTube Video
• Remote Access VPN Statistics
• Maestro MHO Ports Dump - Sorted & Colored
• Update IpToCountry data on Security Managements
• Detect reserved or insecure words in hostnames
• Show Maestro Transceiver Status
• Show Maestro Transceiver & DAC Inventory
• Show VPN Users
• Show VPN S2S tunnels on gateway
• Show Transceiver & Line Card Inventory on Check Point Gaia Systems
• Show licensing overview

Scripts & Tools

• Max Power (max) Script
• Bash CLI Prompt Extentions
• Adding ClusterXL Status to CLI prompt

SmartConsole Extensions (How-To, Developer Guide, YouTube)

• Remote Access VPN Statistics
• Advanced System Summary (ccc)
• Gaia Health Check
• ClusterXL Statistics
• Performance Assessment
• Check Point Services Check
• Maestro Commands for Security Groups
• Interface Summary
• Show LOM Info
• Show Interface Topology on Gateways
• Show VPN Topology on Gateways
• Show CoreXL Dynamic Balancing
• Show VPN Users
• Show VPN Tunnels
• Show VPN sites on world map
• Show SD-WAN sites on world map
Special hint: SmartConsole context info

CheckMates Articles

• Site-to-Site VPN Datasheet
• Properly defining the Internet within a Security Policy
• Properly stopping a cluster member (cpstop vs. cphastop)
• Stateful Inspection Explained
• Check Point Certification Pyramid
• 1400 Appliance FAQ
• 1500 Appliance FAQ
• Check Point Site-to-Site VPN Compatibility Matrix
• Maestro - FAQ

How-To's

• Creating a SmartConsole Extension
• Reacting on Check Point Information Disclosure
• Creating an scpuser Account on Gaia Clish
• Setting Up Certificate Based VPN with Check Point Appliances
• Layers of Defense
• Block IoT Scanners
• Export a Security Policy to Excel

Top-10 Lists

• Check Point Support Resources
• Check Point Support Tools
• Check Point Configuration Mistakes
• Check Point VPN Logins
• Check Point Search Portals

CheckMates Partner articles

• Firewall self-protection
• Upgrade time
• News
• Backup methods
• Performance optimization tips
• R81
• Tools
• Free training resources

SmartEvent Reports

• Endpoint Security Clients Report

Bookmarklets

• Gaia WebUI - Expand Interfaces List
• Gaia WebUI - Expand Routes List
• CP UserCenter - Expand Certificates List

SmartTasks

• GUI client ANY check
• SSH/WebUI ANY check
• Name match check
• Mgmt backup check
• Bash login check
• Session description check