checkpoint firewall in aws

This introductory Video demonstrates manual deployment of Checkpoint Firewall in AWS and provide an understanding of using AWS ingress routing concept with Third-party firewalls. The video does not show use of automation tools like cloud formation as that the helps you do labs at a lower cost since with manual setup you only deploy the components that you require to learn and test saving you costs. For more advanced and redundant installations you will need to use cloud formation templates from checkpoint which also launches load balancers behind the scene and support multi AZ deployments with easy.

[@isotropical]

This is by far the BEST video on TH-cam on how to step through an AWS Check Point set-up. Thank you so much, I was struggling hard until I watched this :)

[@tendaimusonza9547]

thank you for the support

[@TINTIN0107]

man!!! Thank you soooo much!!! your time and effort to teach us this is truly appreciated.

[@Sri-vk7gx]

Hi, This is Pure GOLD!! Can you please post an video on Checkpoint Cluster especially with the application being on different VPC/subnet. This will help in gaining an better understanding of the routing/next-hop and so on.. Thanks for the great stuff.

[@shravanchandrashekharaiah]

thank you very much for the video, I was able to get it working without much of an issue

[@tendaimusonza9547]

Glad to hear ,Thanks

[@jeetsharma2027]

Thanks for this Video. It's help me lot

[@tendaimusonza9547]

Glad you found it helpful. thank you

[@Woodsford123]

good, thanks.

[@dokotella]

Nice! Love it!

[@saschaschulz1977]

Thank you very much.
Great tutorial.
I think the reason that you couldn't see the accept log was maybe that you didn't install the police after publishing.

[@tendaimusonza9547]

Thank you for spotting that. much appreciated

[@ivanarnanz2072]

Great, thanks!

[@tendaimusonza9547]

Thanks for watching

[@boilami]

Thank you man !

[@tendaimusonza9547]

it's a pleasure

[@boilami]

@@tendaimusonza9547 Very well explaned, I follow along !
Have you figured out why allowed traffic not logging ?

[@tendaimusonza9547]

@@boilami ,Is it not logging even after enabling the rule to log , and do you see the allowed traffic if you do tcpdump or fw monitor ? verify if port 257 is open on your security group and also netstat -na | grep 257 to make sure logging port is listening on the manager.also run : tcpdump -i any port 257 in expert mode to check if 2 way logging traffic shows up between manager and the firewall.i know the security group is auto generated ,i have had incidents where one port is missing .

[@boilami]

@@tendaimusonza9547 I will carefully look at this particular port !

[@codyshamloo3505]

Great job..thanks

[@tendaimusonza9547]

Thanks for watching!

[@thohuynh9132]

So what is the reason why do we cant saw the log in the smart console . I had the similar issues , and cant resolve =))

[@thohuynh9132]

Dear Tendai ,
One more question is if we have VM bastions in the Public subnet area, how can we let them go outside or inside the private subnet by passing through the check point firewall.
Is there any way we can do that?

[@leenorris2500]

Hi Tendai how about Cloudguard VPN S2S to other firewall is it same setup as AWS VPN FW and will i still able to download the configuration file on my AWS dashboard to provide to remote site?

[@tendaimusonza9547]

Hi Lee ,Thanks for reaching out. Plz note that VPN config download for sharing with remote site is only an AWS feature ,as for Cloudguard to other VPN device you will need to agree and share common parameters .Let me know if I have answered your question