Check Point Software technologies Ltd 67897 Manual De Usuario
Page 17
Small-scale Deployment
Predefining a Centrally Managed
Deployment
Deployment
To manage the Check Point 1100 Appliance in a centrally managed
deployment, you must install a Security Management Server and
SmartConsole clients that operate with Check Point 1100 Appliance.
deployment, you must install a Security Management Server and
SmartConsole clients that operate with Check Point 1100 Appliance.
The Security Management Server versions that operate with Check Point 1100
Appliance are versions R75.46, R76 and higher.
Appliance are versions R75.46, R76 and higher.
)RULQVWDOODWLRQLQVWUXFWLRQVVHHWKHYHUVLRQ¶Vrelease notes
(
(
http://supportcenter.checkpoint.com
).
After installing the SmartConsole clients you can define the Check Point 1100
Appliance object in SmartDashboard and prepare the security policy (in small-
scale deployments) or create a SmartLSM profile (in large-scale deployments).
Appliance object in SmartDashboard and prepare the security policy (in small-
scale deployments) or create a SmartLSM profile (in large-scale deployments).
Defining the Object in SmartDashboard
You can define the Check Point 1100 Appliance in SmartDashboard before or
after configuration of the appliance on site. The options are:
after configuration of the appliance on site. The options are:
Management First - Where you define the gateway object in SmartDashboard
before you configure and set up the actual appliance on site. This is commonly
used for remotely deployed appliances or appliances that connect to the
Security Management Server with a dynamic IP (e.g. assigned by a DHCP
server or an ISP), as the IP is not known at the time of the configuration of the
object in SmartDashboard. You can prepare a policy that the appliance will
fetch when it is configured.
before you configure and set up the actual appliance on site. This is commonly
used for remotely deployed appliances or appliances that connect to the
Security Management Server with a dynamic IP (e.g. assigned by a DHCP
server or an ISP), as the IP is not known at the time of the configuration of the
object in SmartDashboard. You can prepare a policy that the appliance will
fetch when it is configured.
Gateway First
± Where you configure and set up the Check Point 1100
Appliance first. It will then try to communicate with the Security Management
Server (if this is configured) at 1 hour intervals. If the gateway is connected
when you create the object in SmartDashboard, the wizard retrieves data from
the gateway (such as topology), and helps in configuration.
Server (if this is configured) at 1 hour intervals. If the gateway is connected
when you create the object in SmartDashboard, the wizard retrieves data from
the gateway (such as topology), and helps in configuration.
Note - We recommend that you use the Management First option using
the steps below.
the steps below.
To define the Check Point 1100 Appliance object:
1.
Log in to SmartDashboard using your Security Management credentials.
CP_1100Appliance_GettingStartedG17 17
CP_1100Appliance_GettingStartedG17 17
25/02/2013 10:05:30
25/02/2013 10:05:30