Check Point L-71, Руководство администратора

Страница: 10 / 124

Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 10
CHAPTER 3
Small-scale Deployment Installation
In This Section:
Small-scale Deployment Workflow ...................................................................... 10
Defining a Gateway Object ................................................................................... 10
Defining a Gateway Cluster Object ....................................................................... 13
Creating the Security Policy ................................................................................. 17
Setting Server IP Behind a 3rd Party NAT Device ................................................. 21
This chapter contains procedures for defining a gateway or a gateway cluster. Do the procedures
that match your requirements, then install the policy.
Small-scale Deployment Workflow
This is the suggested workflow for small-scale deployments:
1.
Create the necessary gateway or cluster objects for your appliances in SmartDashboard.
2. Install the Security Policy in SmartDashboard.
3. Configure the relevant appliances with the First Time Configuration Wizard. Alternatively, you
can use a USB drive to quickly configure many appliances without the First Time Configuration
Wizard. For more details, see Deploying from a USB Drive.
4. Manage the appliance settings in SmartProvisioning for the gateway or cluster objects.
Defining a Gateway Object
You can use the SmartDashboard creation wizard to define a Check Point Appliance before or after
you configure the appliance on site.
Options to define a gateway object:
•
Management First
- Define the gateway object in SmartDashboard before you configure and
set up the actual appliance on site. This is commonly used for remotely deployed appliances or
appliances that connect to the Security Management Server with a dynamic IP (assigned by a
DHCP server or an ISP), as the IP is not known at the time of the configuration of the object in
SmartDashboard. You can prepare a policy that the appliance pulls when it is configured.
• Gateway First
– Configure and set up the Check Point Appliance first. It then tries to
communicate with the Security Management Server (if this is configured) at 1 hour intervals. If
there is connectivity with the gateway during object creation in SmartDashboard, the wizard
can retrieve data from the gateway (such as topology), and then help in configuration.
To define a single gateway object:
1. Log in to SmartDashboard using your Security Management credentials.
2. From the Network Objects tree, right click Check Point and select Security Gateway .
The Check Point Security Gateway Creation window opens.
3. Select Wizard Mode .
The wizard opens to General Properties.
4. Enter a name for the Check Point Appliance object and select the hardware type for the
hardware platform.