background image

[C

la

s

s

if

ic

a

ti

o

n

:

P

ro

te

c

te

d

]

11 November 2020

16000 APPLIANCES

QL-15, QL-20, and QP-10

Getting Started Guide

Summary of Contents for 16000

Page 1: ... Classification Protected 11 November 2020 16000 APPLIANCES QL 15 QL 20 and QP 10 Getting Started Guide ...

Page 2: ...precaution has been taken in the preparation of this book Check Point assumes no responsibility for errors or omissions This publication and features described herein are subject to change without notice RESTRICTED RIGHTS LEGEND Use duplication or disclosure by the government is subject to restrictions as set forth in subparagraph c 1 ii of the Rights in Technical Data and Computer Software clause...

Page 3: ...ew and evolving attacks Certifications For third party independent certification of Check Point products see the Check Point Certifications page Check Point 16000 Appliances For more about this release see the home page Latest Version of this Document in English Open the latest version of this document in a Web browser Download the latest version of this document in PDF format Feedback Check Point...

Page 4: ... Updated Shipping Carton Contents on page 27 regulated models and Appliance Physical Specifications on page 29 10 August 2020 Improved HTML formatting and layout 30 April 2020 Rebranded 16000THS to 16600HS and updates made for the 16200 model 20 January 2020 Updates made for 16000THS Turbo Hyperscale model 08 December 2019 DRAFT for Declaration of Conformity purposes only Added BSMI Taiwan informa...

Page 5: ...n Contents 27 Terminology 28 Mounting the 16000 Appliances in a Rack 29 Appliance Physical Specifications 29 Appliance Air Vents 29 Configuring 16000 Appliances 31 Connecting to the Appliance CLI 31 Starting the Appliance 31 Available Software Images 31 Synchronizing RAID 32 Initial Configuration 33 Creating the Network Object 34 16000 Appliances Hardware 35 Front Panel 35 16600HS 35 16000 16200 3...

Page 6: ... PSU Configuration and Monitoring 43 Replacing and Upgrading Components 44 Restoring Factory Defaults 45 Restoring from the Gaia Portal 45 Restoring from the Boot Menu 45 Restoring from Gaia Clish 46 Registration and Support 47 Support 47 Where To From Here 47 ...

Page 7: ...rounded metal object before removing the board from the antistatic bag n Handle the board by its edges only Do not touch its components peripheral chips memory modules or gold contacts n When handling processor chips or memory modules avoid touching their pins or gold edge fingers n Restore the communications appliance system board and peripherals back into the antistatic bag when they are not in ...

Page 8: ...re that may result in an explosion or the leakage of flammable liquid or gas Warning DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED REPLACE ONLY WITH SAME OR EQUIVALENT TYPE RECOMMENDED BY THE MANUFACTURER DISCARD USED BATTERIES ACCORDING TO THE MANUFACTURER S INSTRUCTIONS Electrical Safety Instructions Before turning on the device ground the grounding cable of the equipment Proper groundi...

Page 9: ...ing may apply See http www dtsc ca gov hazardouswaste perchlorate The foregoing notice is provided in accordance with California Code of Regulations Title 22 Division 4 5 Chapter 33 Best Management Practices for Perchlorate Materials This product part or both may include a lithium manganese dioxide battery which contains a perchlorate substance Proposition 65 Chemical Chemicals identified by the S...

Page 10: ...ripheral This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may c...

Page 11: ...ng it over to a designated collection point for the recycling of waste electrical and electronic equipment The separate collection and recycling of your waste equipment at the time of disposal will help to conserve natural resources and ensure that it is recycled in a manner that protects human health and the environment For more information about where you can drop off your waste equipment for re...

Page 12: ...5 QL 20 Date first applied 16600HS January 2020 QP 10 The models of the declaration described above have been assessed and found to be in compliance with the following harmonized standards regulations and technical references Category Technical Specification Description EMC EMI CE EN 55032 2015 AC 2016 Class A EN 61000 3 2 2014 Class A EN 61000 3 3 2013 EN 55024 2010 A1 2015 EN 61000 4 2 2009 EN 6...

Page 13: ...teristics AS NZS _RCM AS NZS CISPR 32 2015 Class A CISPR32 2015 C1 2016 Class A Information Technology Equipment Radio Disturbance Characteristics Safety IEC 60950 1 2005 AMD1 2009 IEC 60950 1 2005 AMD2 2013 EN 60950 1 2006 A11 2009 A1 2010 A12 2011 A2 2013 UL ULc 62368 1 IEC 62368 1 2014 EN 62368 1 2014 A11 2017 Information technology equipment Electrical Safety requirements LVD RoHS EN 50581 201...

Page 14: ...Declaration of Conformity 16000 Appliances Getting Started Guide 14 BSMI Taiwan Declaration of Restricted Substances ...

Page 15: ...Declaration of Conformity 16000 Appliances Getting Started Guide 15 Description QL 20 QL 15 ...

Page 16: ...rtant de les manipuler avec soin Les mesures suivantes sont généralement suffisantes pour protéger votre équipement contre les décharges d électricité statique n Cet équipement doit être mis à la terre n Avant de manipuler la carte portez aux poignet un bracelet antistatique relié à la terre n Touchez un objet métallique relié à la terre avant d extraire la carte de son sachet antistatique n Ne te...

Page 17: ...e d alimentation lors du transport n Veuillez respecter les lois et réglementations locales en matiìre de mise au rebut sécurisée des piles au lithium n Jeter une pile au feu ou dans un four chaud l écraser ou la couper peut causer une explosion n Laisser une pile dans un environnement de trìs haute température peut causer une explosion ou la fuite de gaz ou liquide inflammable n Laisser une pile ...

Page 18: ...ut tenir compte des informations mentionnées par la plaque technique de l instrument 5 Mise à la terre les équipements montés en rack doivent être en permanence reliés à un terre fiable Il faut faire particuliìrement attention aux branchements qui ne vont pas directement à la source électrique par exemple des multiprises Pour la Californie Matériau perchloraté manipulation spéciale potentiellement...

Page 19: ...a directive sur la compatibilité électromagnétique 2014 30 UE Le produit ci dessus est conforme à la directive basse tension 2014 35 UE et satisfait aux exigences relatives aux équipements électriques conçus pour être utilisés dans une certaine plage de tensions Déclaration de la Federal Communications Commission FCC pour un appareil ou périphérique numérique de classe A Cet équipement a été testé...

Page 20: ...ou son emballage signifie que le produit ne doit pas être mis au rebut avec les autres déchets ménagers Il est de votre responsabilité de le porter à un centre de collecte désigné pour le recyclage des équipements électriques et électroniques Le fait de séparer vos équipements lors de la mise au rebut et de les recycler contribue à préserver les ressources naturelles et s assure qu ils sont recycl...

Page 21: ...statischen Entladungen zu schützen n Dieses Gerät muss geerdet werden n Tragen Sie beim Umgang mit der Platine eine Erdungsmanschette die zum Neutralisieren statischer Ladungen ausgelegt wurde n Fassen Sie vor dem Entnehmen der Platine aus der antistatischen Verpackung einen geerdeten Metallgegenstand an n Berühren Sie die Platine nur an den Kanten Berühren Sie keine Komponenten der Platine Periph...

Page 22: ... Die Entsorgung einer Batterie in Feuer oder einem heißen Ofen oder die mechanische Zerkleinerung oder das Zerschneiden einer Batterie kann zu einer Explosion führen n Das Aufbewahren einer Batterie in einer Umgebung mit extrem hohen Temperaturen kann zu einer Explosion oder zum Auslaufen von entflammbarer Flüssigkeit oder Gas führen n Eine extrem niedrigem Luftdruck ausgesetzte Batterie kann zu e...

Page 23: ...ngaben auf dem Leistungsschild des Geräts sorgfältig geprÜft werden 5 Zuverlässige Erdung Ausrüstung die in Racks montiert ist muss zuverlässig geerdet sein Besonders müssen hierbei die Stromanschlussleitungen und weniger die direkten Verbindungen zum Abzweigstromkreis beachtet werden z B durch die Verwendung von Adapterleisten Für Kalifornien Perchlorate möglicherweise ist eine spezielle Handhabu...

Page 24: ...agen der Richtlinie des Europäischen Rates bezüglich zur der Angleichung der Rechtsvorschriften der Mitgliedstaaten im Hinblick auf die Richtlinie über elektromagnetische Verträglichkeit 2014 30 EU konform ist Das genannte Produkt ist mit der Niederspannungsrichtlinie 2014 35 EU konform und erfüllt die Auflagen betreffend elektrische Betriebsmittel zur Verwendung innerhalb bestimmter Spannungsgren...

Page 25: ...t werden darf Es obliegt Ihrer Verantwortung das Gerät an einer entsprechenden Stelle für die Entsorgung oder Wiederverwertung von Elektrogeräten aller Art abzugeben Die separate Sammlung und das Recyceln Ihrer alten Elektrogeräte zum Zeitpunkt ihrer Entsorgung trägt zum Schutz der natürlichen Ressourcen bei und gewährleistet dass Sie auf eine Art und Weise verwertet werden die keine Gefährdung fü...

Page 26: ...htning fast networking technologies all optimized to provide the highest security effectiveness and performance for mid to large size enterprise security networks Strengthening Check Point Infinity Architecture the new 16000 16200 series appliances deliver consolidation and security across any network cloud and mobile environment with full threat visibility and control Ready to battle any threat f...

Page 27: ...n 2 power cables 16000 Base 1 power cable 16200 Base n 2 PSU restraints n 1 RJ45 network cable n 1 RJ45 console cable n 1 RJ45 loopback adapter n 1 Fiber loopback adapter n 1 USB Type C cable n 2 power cables n 2 PSU restraints n 1 RJ45 network cable n 1 RJ45 console cable n 1 RJ45 loopback adapter n 1 USB Type C cable n 2 DAC 100G 3M cables in a separate package Rack Mounting n Telescopic rails n...

Page 28: ...ty Policies are stored on the Security Management Server and downloaded to the Security Gateway n SmartConsole GUI applications that are used to manage various aspects of Security Policy enforcement n SmartDashboard A Legacy SmartConsole GUI application that is used by the system administrator to create and manage specific settings for some Software Blades n Locally Managed Deployment When all Che...

Page 29: ... in 4 4 cm 1U 32 F 104 F 0 C 40 C 100V 10A 240V 5A 47 63HZ 16000 Base Plus QL 15 17 40 in 44 2 cm 24 01 in 61 0 cm 3 46 in 8 8 cm 2U 32 F 104 F 0 C 40 C 100V 13 8A 240V 8 5A 47 63HZ 16000 Turbo 16200 QL 20 17 40 in 44 2 cm 24 01 in 61 0 cm 3 46 in 8 8 cm 2U 32 F 104 F 0 C 40 C 100V 13 8A 240V 8 5A 47 63HZ Appliance Air Vents Make sure that the appliance air vents have sufficient airflow from front...

Page 30: ...Mounting the 16000 Appliances in a Rack 16000 Appliances Getting Started Guide 30 ...

Page 31: ...e C console cable When you finish using the RJ45 port reconnect the mini USB console cable Note To use the USB type C console port a driver must be installed on the console client machine desktop laptop For installation instructions and the download link see the appliance home page Starting the Appliance Connect the appliance to a power source and turn on the appliance When the appliance is ready ...

Page 32: ...aid_diagnostic This command shows data about the RAID and storage devices with the percent of synchronization done DiskID 0 is the left storage device DiskID 1 is the right storage device After the first boot and after you replace a second storage device the RAID state in the VolumeID line shows DEGRADED this indicates that the drives are not synchronized The DiskID 0 state shows ONLINE and the Di...

Page 33: ...ne fully synchronized storage device in the system 1 When the system is up remove the failed storage device 2 Wait 15 seconds The appliance recognizes that you removed a storage device 3 Insert a new storage device If necessary you can reboot the appliance with one storage device and install the new storage device later The system automatically adds the new storage device to the RAID configuration...

Page 34: ...martConsole to the Management Server 2 Configure a new Security Gateway object for the appliance 3 Enter the IP address for the appliance 4 Create Secure Internal Communication SIC between the Security Gateway and the Management Server Enter the activation key you used in the First Time Configuration Wizard 5 Configure the topology 6 Configure and install the Security Policy ...

Page 35: ...m Component Description 1 Service tag A slide out card that identifies the appliance and shows its serial number and MAC address 2 Locator button Turns the location beacon LED on and off in the appliance 3 System LEDs See the Front Panel System LEDs section below 4 Reset Insert a pin for 5 to 8 seconds to perform a hardware reset ...

Page 36: ...devices When monitoring the storage devices with the raid_diagnostic command DiskID 0 is the left storage device and DiskID 1 is the right storage device numbered 1 and 2 on the appliance s chassis Note 16000 16200 Base appliances are supplied with one storage device by default 11 Storage device power LED n Off Storage device power is off n On Green Storage device power is on 12 Storage device act...

Page 37: ...pply status n Off No power no status n Amber Power supply fault detected n Green All power supplies are functioning correctly 4 Alert n Off No faults detected n Blinking red System fault detected 5 Location beacon n Off Location beacon is turned off n Blinking blue Location beacon is turned on through the Gaia Portal or Gaia Clish n Solid blue Location beacon is turned on through the Locator butto...

Page 38: ...ove the cover of the appliance 2 ESD grounding point When servicing the appliance connect an ESD strap to this point 3 Alarm Off button for power supply units If a power supply cable is not connected to the outlet an alarm sounds continuously Press this button to turn off the alarm Note that this button is functional immediately after powering up the appliance ...

Page 39: ...n 16000 16200 appliances The PSUs are numbered from top to bottom in the OS as Power Supply 1 and Power Supply 2 In 16600HS appliances The PSUs are numbered from left to right in the OS as Power Supply 1 and Power Supply 2 Note 16000 16200 Base appliances that use AC PSUs contain one AC PSU and one dummy filler See PSU Configuration and Monitoring on page 43 7 Thumb screws for cooling fan unit Loo...

Page 40: ...stalling the Power Cable Restraint You can use the power cable restraint to prevent accidental removal of the power cable Item Description 1 Restraint anchor 2 Cable loop 3 Restraint strip tab 4 Restraint strip Item Description 1 Restraint strip slot 2 Power supply inlet ...

Page 41: ... power supply inlet 4 Insert the restraint strip anchor into the slot until it snaps and locks 5 Connect the power cable to the power supply inlet 6 Pull the restraint tab to the side to move the cable loop on the restraint strip 7 Move the cable loop until you can put it around the power cable as shown in the next figure 8 Insert the open side of the cable loop into the loop slot until it is tigh...

Page 42: ...nt Administration Guide Dual Redundant BIOS To ensure resilience in the event of a BIOS failure appliances are equipped with dual redundant BIOS images If an appliance encounters a BIOS failure it will boot up from a recovery read only BIOS image that enables full functionality of the appliance These notifications are shown in the event of a BIOS failure n The appliance s Alert LED on the front pa...

Page 43: ...AC PSU 1 AC PSU 1 Dummy filler 2 AC PSUs 2 AC PSUs 2 AC PSUs DC PSU 2 DC PSUs 2 DC PSUs 2 DC PSUs 2 DC PSUs Important All PSUs on an appliance must be of the same type either all AC or all DC When a PSU is functioning correctly the PSU LED is green the Alert LED is not blinking due to a PSU issue might still be blinking due to other errors and there is no SNMP alarm When a PSU is not functioning c...

Page 44: ...ximum Minimum Denotes the maximum and minimum thresholds For PSUs they are only measured as Up and Down Replacing and Upgrading Components The appliance has parts that you can easily replace to minimize downtime There are also components that you can install to upgrade the appliance These are the parts and components that can be used with the appliance n Telescopic rails n Line cards excluding 166...

Page 45: ... Defaults window opens The image installed on the appliance is shown 4 Click Apply The appliance reboots and installs the selected version from scratch Restoring from the Boot Menu To restore the appliance from the Boot Menu 1 Connect the supplied serial cable s RJ45 or USB type C connector to the console port on the front of the appliance 2 From the computer open a terminal emulation program such...

Page 46: ...am Restoring from Gaia Clish To restore the appliance from Gaia Clish 1 Connect to the command line on the appliance 2 Log in to Gaia Clish 3 Run set fcd revert image_name Example MyAppliance set fcd revert Gaia_R80 30 Warning This command will erase all the current configuration on this appliance and will revert it to the selected image Are you sure you want to continue such action Yes No No yes ...

Page 47: ... Registration and Support Support For additional technical information about Check Point products consult the Check Point Support Center Where To From Here You have the basics to get started The next step is to get more advanced knowledge of your Check Point software ...

Reviews: