[NOTES] Installing Check Point Firewall R80.10 in EVE-NG CE 6.2.0-4 (based on Ubuntu Server 22.04.4 LTS)

Subject: [NOTES] Installing Check Point Firewall R80.10 in EVE-NG CE 6.2.0-4 (based on Ubuntu Server 22.04.4 LTS)


Author: Mr. Turritopsis Dohrnii Teo En Ming

Country: Singapore

Date: 9 Apr 2025 Wednesday


DETAILED INSTRUCTIONS

======================


EVE-NG Community Edition 6.2.0-4 is based on Ubuntu Server 22.04.4 LTS.


EVE-NG stands for Emulated Virtual Environment - Next Generation.


Below is the YouTube video guide I am following.


Reference YouTube video: How to download Checkpoint Firewall for free and add in EVE-NG

Link: https://www.youtube.com/watch?v=dxx6xgGcbNw


Download and install EVE-NG Community Edition 6.2.0-4, which is based on Ubuntu Server 22.04.4 LTS, on a bare metal physical machine with at least 1 NIC.


Upload Check Point Firewall ISO filename Check_Point_R80.10_T479_Gaia.iso to EVE-NG using WinSCP.


mkdir /opt/unetlab/addons/qemu/cpsg-R80-10


mv Check_Point_R80.10_T479_Gaia.iso /opt/unetlab/addons/qemu/cpsg-R80-10/cdrom.iso


cd /opt/unetlab/addons/qemu/cpsg-R80-10


/opt/qemu/bin/qemu-img create -f qcow2 hda.qcow2 20G


Login to EVE-NG Web-UI.


Create new lab add your newly created Checkpoint image, connect it to Cloud0 network.


Click on Add new lab.


Name: Checkpoint


Version: 1


Click Save.


unl_wrapper -a fixpermissions


Right click, select Node.


Select CheckPoint Security Gateway VE.


Console: choose vnc


Click Save.


Right click on Check Point Firewall (CP) icon and click Start.


Double click on the Check Point Firewall icon and click Open ultravnc_wrapper.bat


You will see "Welcome to Check Point Gaia R80.10"


Click Install Gaia on this system


Do you wish to proceed with the installation? Click OK


Keyboard Selection: US


Click OK


Partitions Configuration: Click OK


Enter your password and confirm it.


Click OK


Choose eth0 for the Management Port.


Click OK.


Management Interface (eth0)

=============================


IP address: 192.168.1.99

Netmask: 255.255.255.0

Default gateway: 192.168.1.1


Click OK


Confirmation: Click OK


Installation complete: Click Reboot


After rebooting, try to login at the Check Point Firewall console.


Login was successful.


Right click the Check Point Firewall icon and click Stop.


Right click the Check Point Firewall icon and click Edit.


Change the CPU from 4 to 2.


RAM (MB): 6144


Ethernets: 4


QEMU Version: 2.4.0


QEMU Arch: x86_64


QEMU Nic: tpl(e1000)


Console: telnet


Click Save.


Right click and select Network.


Type: Management(Cloud0)


Click Save.


Drag a connection from the Net icon to the CP icon.


Right click the Check Point Firewall icon and click Start.


Double click the Check Point Firewall icon and click Open SSH, Telnet and Rlogin client.


Access the Check Point Firewall web UI at https://192.168.1.99/ using your favorite web browser.


Enter your username and password and click LOGIN.


Run the "top" Linux command.


The qemu-system-x86 process frequently consumes 200% to 300% of CPU usage on Ubuntu Server 22.04.4 LTS. 

As a result, the Ubuntu Server is frequently unresponsive and extremely slow. 

How do I solve this problem?


The Check Point First Time Configuration Wizard takes FOREVER to load.


I have decided that I will not go through the Check Point First Time Configuration Wizard.


Right click the Check Point Firewall icon and click Stop.


cd /opt/unetlab/tmp/0/


Click on the Lab details on the left hand side menu.


Copy the UUID.


cd deba7f1a-1699-401c-9cf8-74ef69e34d8e


Right click on the Check Point Firewall icon. You will see 1.


cd 1


Commit the QCOW2 image.


/opt/qemu/bin/qemu-img commit hda.qcow2

Image committed.


cd /opt/unetlab/addons/qemu/cpsg-R80-10/


root@eve-ng:/opt/unetlab/addons/qemu/cpsg-R80-10# du -h hda.qcow2

6.1G    hda.qcow2


root@eve-ng:/opt/unetlab/addons/qemu/cpsg-R80-10# du hda.qcow2

6304264 hda.qcow2


Additional learning resources

==============================


[1] How to Add Check Point Firewall Images to EVE-NG

Link: https://networkhunt.com/how-to-add-check-point-firewall-images-to-eve-ng/


[2] How to add Checkpoint R81 Image in Eve-ng

Link: https://www.youtube.com/watch?v=KTRD67xGixQ


[3] How to create Check Point images 

Link: https://www.eve-ng.net/index.php/documentation/howtos/howto-add-checkpoint/


Next / Upcoming project: I will be installing Check Point Firewall QCOW2 image in Ubuntu Linux KVM host in the next few weeks. 

Today's work is just a preparation and to lay the ground work for my next project.


Regards,


Mr. Turritopsis Dohrnii Teo En Ming

Singapore

9 Apr 2025 Wednesday 11.30 PM





REFERENCES

================


[1] https://lists.ubuntu.com/archives/ubuntu-users/2025-April/314228.html


[2] https://marc.info/?l=ubuntu-users&m=174421267227276&w=2


[3] https://lore.kernel.org/netdev/vd1JNbzpv1bI-BVv7ZV3qCNH7CQ8AcKmMC1P4yGCJuu1AZIh9toXC0cJwhLHv9l1Anhrwm0RKgQdUrJ64uVStVyqdKlJktD6Lvpfc4QZ_8c=@protonmail.com/


[4] https://marc.info/?l=linux-netdev&m=174421310027707&w=2







Comments

Post a Comment

Popular posts from this blog

How the Singapore Government cheated my family of a HDB flat (Draft 22 Aug 2023)

Subject: How the Singapore Government cheated my family of a HDB flat (Draft 22 Aug 2023) It is a Well-Known Fact that government(s) invented mental illness to punish and torture people (and their families) who criticise the government or say bad things about the government. The Singapore Government rewarded my mother with a mental illness (schizophrenia). By leveraging mind control technology, the Singapore Government is able to make my mother hear voices in her head and trick her into believing that her neighbors are scolding her and targeting her everyday. Yes, the Singapore Government resorted to using this trickery. My mother firmly believes that her neighbors are scolding her and targeting her everyday. So we sold off our 1st HDB flat at Bedok North Street 3 and purchased another HDB flat at Yishun without careful consideration, planning and advice. When we moved to the HDB flat at Yishun, my mother still firmly believes that her neighbors are scolding her and targeting her every...
Read more

[DRAFT 26 SEP 2022] HDB refuses to reduce monthly rental fees of my rental flat despite many appeals

Subject: [DRAFT 26 SEP 2022] HDB refuses to reduce monthly rental fees of my rental flat despite many appeals DRAFT 26 SEP 2022 FOR IMMEDIATE RELEASE My name is Mr. Turritopsis Dohrnii Teo En Ming. I am 44 years old. I am a Targeted Individual (TI) living in Singapore. A Targeted Individual is a person who is persecuted, targeted, marked and blacklisted by the government. After graduation from the National University of Singapore in Dec 2006, I started working in Defense Science and Technology Agency (DSTA) as an IT Engineer. But I offended Singapore Minister Mentor Lee Kuan Yew in the year 2007. When I was having a private conversation with my manager Mr. Loh Choon Fah in his office, I said: "When Lee Kuan Yew is gone, Singapore would be more democratic.". This is how I offended Singapore strongman Lee Kuan Yew. Within a few months, I started hearing threatening and menacing voices from the Singapore government. Hearing voices is also known as schizophrenia (mental illness)....
Read more