I found myself in a awkward situation the other weekend where I lost access to Check Point’s internal networks after switching over some networks due to anti-spoofing and after a short adventure of spinning up a new management server in Azure, pointing the firewall to it and pushing a more permissive rule I was back online!!!!
However the problem now was that if I reset the SIC to point it back to the old mgmt station it would do a CPSTOP and CPSTART which would unload the happy policy and I would be back offline and no I could not go onsite!
Continue reading