четвъртък, ноември 30, 2023

CheckPoint SmartConsole access through SSH JumpHost

 LocalPC -->  ssh session --> Linux Jumphost -->  SmartConsole --> CP cluster

The general idea is : SSH portforwarding through Jumphost; start locally installed SmartConsole and point it to 127.0.0.1

Putty supports multiple local port forwardings in a single session:

Ports needed by Smart Console:

tcp/18190  

tcp/18264 

tcp/19009 

tcp/258 

and probably tcp/443




Putty profile export: (essentials only)

[HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\SmartConsole]

"HostName"="myUser@JumpHost"

"LogFileName"="putty.log"

"PublicKeyFile"="C:\\path\\to\\location\\where\\my private key is\\myUser_private.ppk"

"LocalPortAcceptAll"=dword:00000000

"RemotePortAcceptAll"=dword:00000001

"PortForwardings"="L18190=CP_SmartConsole_IP:18190,L18264=CP_SmartConsole_IP:18264,L19009=CP_SmartConsole_IP:19009,L258=CP_SmartConsole_IP:258"



P.S. Export putty config/sessions

cmd.exe, requires elevated prompt due to regedit:

Only sessions (produce file putty-sessions.reg on the Desktop):

regedit /e "%USERPROFILE%\Desktop\putty-sessions.reg" HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions

All settings except ssh keys (produce file putty.reg on the Desktop):

regedit /e "%USERPROFILE%\Desktop\putty.reg" HKEY_CURRENT_USER\Software\SimonTatham