Enable SFTP to Checkpoint Gaia OS System

1. Enable SFTP on Checkpoint either SPLAT or Gaia

By default, there is no SFTP access to Checkpoint OS either SPLAT or Gaia. But there is always a way to enable it manually.  Here is a listed steps to do it from Gaia command line

1.1. Enter into Expert Mode

1.2. Enable an account to have bash access

chsh -s /bin/bash admin

1.3. Edit the SSHD configuration file in Vi editor:

[Expert@CP]# vi /etc/ssh/sshd_config

1.4. At the almost end of sshd_config file, uncomment the ‘Subsystem  sftp  /usr/libexec/openssh/sftp-server‘ line by deleting the pound ‘#’ character:

# override default of no subsystems
Subsystem       sftp    /usr/libexec/openssh/sftp-server

DenyUsers root shutdown halt nobody ntp pcap rpm
# ckp – CR00596011
#AllowGroups root
“/etc/ssh/sshd_config” 124L, 3422C written

1.5. Save the changes and exit Vi editor

1.6. Restart SSHD service:

[Expert@CP]# /etc/init.d/sshd restart
Stopping sshd: [  OK  ]
Starting sshd: [  OK  ]

1.7. Set Admin back to default clish shell, simply run ‘chsh -s /etc/cli.sh admin‘ command.

Note: Please remember you will get an error message if you did not put admin into bash mode while doing sftp:
(Received too large(1129072974 B) SFTP packet. Max Supported packet size is 1024000 B.)

———————————————————————————————————

2. Another way to enable SFTP on Gaia