Firewall Security
SCP to transfer files to Checkpoint SPLAT
When you SCP to Checkpoint SPLAT firewall and get the error “lost connection”, this is what you may see
[server] scp log1.tgz admin@xx.xx.xx.xx:/tmp
The authenticity of host ‘xx.xx.xx.xx (xx.xx.xx.xx)’ can’t be established.
RSA key fingerprint is 33:ff:72:0d:d6:57:53:16:d6:60:da:7e:f8:61:71:a8.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘xx.xx.xx.xx’ (RSA) to the list of known hosts.
admin@xx.xx.xx.xx’s password:
lost connection
To resolve this do the following
1. make sure the admin shell has been changed from /bin/cpshell to /bin/bash
chsh admin
Changing shell for admin.
New shell [/bin/cpshell]: /bin/bash
Shell changed.
2. create a new file “touch /etc/scpusers”
3. edit the file and add the users you want to allow for scp
example:
more /etc/scpusers
admin
4. restart the ssh service
service sshd restart
Related posts:
- Use SCP with Cisco routers and PIX/ASA firewalls to transfer files.
- Recovering Nokia IPSO Password
- How to check what linux shell I am using?
- Installing Checkpoint HFA
- Checkpoint SPLAT Route commands
Tags: checkpoint
Discussion
2 comments for “SCP to transfer files to Checkpoint SPLAT”
Post a comment
Categories
Latest in Security News
- Phoenix, Phoenix, I need help! 2012/01
- entrepreneur.com compromised with CrimePack 2012/01
- Search for Google Chrome leads to Compromised Chrome Plugin Forum 2012/01
- The rise of a typosquatting army 2012/01
- Trending Topic Search for "QuickTime" Leads to Phishing Site 2012/01
- My email address was shared on Twitter, but who cares? 2012/01
- Malicious email scam "Re: Scan from a Xerox W. Pro #XXXXXXX" returns with a new face 2012/01
- One critical and six important Microsoft patches to start 2012 2012/01
- Typosquatting social web gains top Alexa ranking 2012/01
- Spam Emails Link To QR Codes 2012/01
Translator
Doesn’t work for me. I am using SSH Secure Shell and the SSH Secure File Transfer. Even with the changes made above I am still unable to get into the file transfer portion.
tcpdump to check if the attempts reach the device, see /var/log/secure for any error messages, check the /etc/ssh/ssd_config file for any kind of restrictions.