Technical data

Configuring VSX

Check Point VSX Administration Guide NGX R67 | 67

2. Open $FWDIR/conf/cpauthd.conf , on the VSX Gateway machine using a text editor.

3. Add or modify the following attributes according to the table:

Attribute

Default

Value

Explanation

clauth_port

259

The TCP port on which client authentication over TELNET is

done.

0 = Client authentication over TELNET is disabled.

clauth_http_port

900

The TCP port on which client authentication over

HTTP/HTTPS is done.

0 = Client authentication over HTTP/HTTPS is disabled.

clauth_http_ssl

0 = HTTPS client authentication is disabled.

1 = HTTPS client authentication is enabled.

clauth_http_nickname

none

Specifies the certificate nickname when client authentication

is performed over HTTPS.

This attribute must match the virtual system certificate

nickname as configured using SmartDashboard (Virtual

System >VPN >Certificate List).

4. Run cpwd_admin stop -name FWD -path "$FWDIR/bin/fw" -command "fw kill fwd".

5. Run cpwd_admin start -name FWD -path "$FWDIR/bin/fwd" -command "fwd".