Check Point L-71, Руководство администратора

Страница: 32 / 124

SmartProvisioning
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 32
Defining SmartLSM Gateways Using LSM CLI
This is a sample SmartLSM CLI script that you can use to create a new gateway object and
associate it with a SmartLSM profile. Optionally, you can also set a SIC password and initiate a SIC
connection.
LSMcli <server> <user> <password> AddROBO CPSG80 <RoboName> <Profile>
[-O= <ActivationKey> [-I= <IP> ]]
Parameter Description
<server>
The Security Management Server on which to create the
gateway object
<user>
The username of the Security Management Server
administrator
<password>
The password of the Security Management Server
administrator
<RoboName>
The name for the new gateway object
<Profile>
Then name of the SmartLSM profile to associate with the
gateway
<ActivationKey>
The SIC password
<IP>
The IP to use to initiate a SIC connection
Managing Device Settings
You can manage device settings directly on individual gateways or you can use a
SmartProvisioning Profile to manage multiple gateways. For more information about provisioning
profiles and creating them, see the
SmartProvisioning Administration Guide
.
These device settings are unique to the Check Point Appliance. They can be defined directly on the
device or through the profile. Their tabs are:
• Firmware
• RADIUS
•
Hotspot
• Configuration Script
Configuring Firmware
This section explains how to configure firmware installation settings for the provisioning profile
for the Check Point Appliance. When you configure firmware settings on a Provisioning Profile,
you give the configuration for all appliances that reference this profile.
Firmware configuration lets you replace the firmware on the Security Gateway. The Security
Gateway version must match its SmartLSM profile's version as defined in SmartDashboard for
correct policy behavior. As a result, after firmware upgrade, the SmartLSM profile is replaced with
the default SmartLSM security profile.