Re: Checkpoint client

  • From: rdean@xxxxxxxxxxxxxxxx
  • To: isalist@xxxxxxxxxxxxx
  • Date: Thu, 22 Jan 2004 18:52:35 -0700

I ran these scripts and it ran great. I worked on this for a year. Found
that the version of secure remote matters. Must be the NG version. I could
not get it to work using the firewall client and make sure your wins / dns
are working from your server.
This is the first part of the script. Look through and change ("Your
Server name here"). to your server.

Secure Remote Script 1:

Const ERROR_ALREADY_EXISTS = 183
Sub CheckError()
On Error Resume Next
If (Err.Number <> 0) And (Err.Number <> ERROR_ALREADY_EXISTS) Then
MsgBox "An error has occured:" & vbCrLf & Err.Description & Err.Number
WScript.Quit Err.Number
End If
End Sub

On Error Resume Next
Set ISA = CreateObject("FPC.Root")
ISA.Refresh
Set Elements = ISA.Arrays("Your Server name here").PolicyElements
Set APolicy = ISA.Arrays("Your Server name here").ArrayPolicy
Set Publishing = ISA.Arrays("dean0").Publishing

'-------------------------------------------------------
Set Protocols = Elements.Protocoldefinitions
Set NewDefinition = Protocols.AddUDP ("002 SecuRemote Auth",3,500)
CheckError
NewDefinition.Description = "CheckPoint Key Control port."

Set NewDefinition = Protocols.AddUDP ("004 CheckPoint UDP
Encapsulation",3,2746)
CheckError
NewDefinition.Description = "CheckPoint UDP Encapsulation port"

Set NewDefinition = Protocols.AddTCP ("006 SecuRemote Topo",1,264)
CheckError
NewDefinition.Description = "CheckPoint: Topology port"

Set NewDefinition = Protocols.AddUDP ("008 FW1_PSLogon_NG",3,18231)
CheckError
NewDefinition.Description = "CheckPoint: used for SecureClient's logon to
Policy Server protocol"

Set NewDefinition = Protocols.AddTCP ("0010 FW1_SCV_Keep_Alive",1,18233)
CheckError
NewDefinition.Description = "CheckPoint: used for SCV keep-alive packets"

Set NewDefinition = Protocols.AddTCP ("0012 FW1_SDS_Logon",1,18232)
CheckError
NewDefinition.Description = "CheckPoint: used for SecureClient's Software
Distribution Server download protocol"

Protocols.Save
CheckError
MsgBox "SecuRemote Setup finished succesfully. It is recommended that you
restart ISA services after importing."

Secure Remote Script 2:


Const ERROR_ALREADY_EXISTS = 183
Sub CheckError()
On Error Resume Next
If (Err.Number <> 0) And (Err.Number <> ERROR_ALREADY_EXISTS) Then
MsgBox "An error has occured:" & vbCrLf & Err.Description & Err.Number
WScript.Quit Err.Number
End If
End Sub

On Error Resume Next
Set ISA = CreateObject("FPC.Root")
ISA.Refresh
Set Elements = ISA.Arrays("Your Server Name").PolicyElements
Set APolicy = ISA.Arrays("Your Server Name").ArrayPolicy
Set Publishing = ISA.Arrays("Your Server Name").Publishing

'-------------------------------------------------------
Set Protocols = Elements.Protocoldefinitions
Set NewDefinition = Protocols.AddUDP ("003 SecuRemote Auth",2,500)
CheckError
NewDefinition.Description = "CheckPoint Key Control port."

Set NewDefinition = Protocols.AddUDP ("005 CheckPoint UDP
Encapsulation",2,2746)
CheckError
NewDefinition.Description = "CheckPoint UDP Encapsulation port"

Set NewDefinition = Protocols.AddTCP ("007 SecuRemote Topo",0,264)
CheckError
NewDefinition.Description = "CheckPoint: Topology port"

Set NewDefinition = Protocols.AddUDP ("009 FW1_PSLogon_NG",2,18231)
CheckError
NewDefinition.Description = "CheckPoint: used for SecureClient's logon to
Policy Server protocol"

Set NewDefinition = Protocols.AddTCP ("011 FW1_SCV_Keep_Alive",0,18233)
CheckError
NewDefinition.Description = "CheckPoint: used for SCV keep-alive packets"

Set NewDefinition = Protocols.AddTCP ("013 FW1_SDS_Logon",0,18232)
CheckError
NewDefinition.Description = "CheckPoint: used for SecureClient's Software
Distribution Server download protocol"

Protocols.Save
CheckError
MsgBox "SecuRemote Setup finished succesfully. It is recommended that you
restart ISA services after importing."


Other related posts: