Check Point L-71, Руководство администратора

Страница: 21 / 124

Installation
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 21
You can access the Policy Installation Status window in these ways:
• From the menu bar - Click Policy > Policy Installation Status .
• From the toolbar - Click the Policy Installation Status icon.
• From the status bar - Click Failed or Pending . The contents of the Policy Installation Status
window are shown filtered according to the link clicked.
•
From notification balloons - Click
See Details
in the balloon.
Setting Server IP Behind a 3rd Party NAT Device
When you use the
Management First
deployment scenario, the policy is prepared to be fetched by
appliances when they are configured.
During each appliance’s first time configuration, the routeable IP address of the Security
Management Server is manually configured to create a first connection.
When SIC is established between the appliance and Security Management Server, the policy is
fetched for the first time. Then, an automatic mechanism calculates the routeable IP address of
the Security Management Server for the periodic policy fetch attempts. However, if the Security
Management Server is located behind a 3rd party NAT device, the automatic mechanism fails.
In such cases, you can manually determine the routeable IP address of the Security Management
Server, not only for the first connection. You can request that the appliance always attempt a
connection with a manually configured IP address. You can configure this from the First Time
Configuration Wizard - Security Management Server Connection page (select
Always use this IP
address and enter the IP address) or from the WebUI Home > Security Management page.