Check Point L-71, Administration Manual

Page: 92 / 124

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 92
Reach My Device
Reach My Device lets you remotely connect to the appliance from the Internet so that you can use
the WebUI or CLI when necessary. This is done by tunneling the administrative UI or CLI
connections through a Check Point Cloud Service. Such configuration is very useful in instances
where the appliance is behind a NAT device or firewall, and cannot be reached directly. In addition,
the feature makes it easier to access an appliance with a dynamically assigned IP address.
To register to the Reach My Device service:
1. Click Register .
The Reach My Device window opens.
2. For Host Name , use the default host name or enter a name for this Check Point Appliance to
enable remote access.
3. If the host name was already defined, select
Register with an existing homename
and enter
the
Validation token
of the gateway. This token verifies that an existing name belongs to this
appliance owner.
4. Click
Apply
.
The validation token, web link, and shell link are shown on the page.
5. Go to
Device
>
Administrator Access
. Configure
Internet
as a source for administrator access
and
set specified IP addresses
.
When the gateway participates in VPN, you can exclude the WAN interface (or any other interface
used for the Internet connection) from the encryption domain and use Reach My Device traffic
without a VPN tunnel.
In the VPN Site to Site global settings Advanced Setting , enable "Do not encrypt connections
originating from the local gateway."
How to access the gateway with the Reach My Device service:
When registration is complete, an outgoing tunnel to the Check Point Cloud Service is established
with the appliance's IP address.
Remote Access to the WebUI
Web Link - Use this URL in a browser to remotely access the appliance. For example:
https://my gateway-web.smbrelay.checkpoint.com
. When the login page shows, enter
the applicable user name and password.
Remote Access to the CLI
Shell Link - Use this URL in a browser to open an SSH connection to the appliance to use CLI
commands. For example:
https://mygateway-shell.smbrelay.checkpoint.com
. Enter
the administrator credentials.
Using System Tools
See Using System Tools (on page 54 ).