Check Point L-71, Руководство администратора

Страница: 30 / 124

SmartProvisioning
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 30
Finish
1. Select Edit SmartLSM gateway properties after creation to work with the newly created
object.
2. Click Finish to complete the SmartLSM Security Gateway creation.
After the SmartLSM Security Gateway object is created:
• Update the Corporate Office Gateway.
•
If the VPN option was selected in the VPN Properties page, the Certificate Authority issues a
certificate to the appliance. This certificate is installed on the appliance the first time that the
SmartLSM Security Gateway connects to the Security Management Server.
To update the Corporate Office Gateway:
1. Select
Update Corporate Office Gateway
from the toolbar.
2. Select the Corporate Office Gateway from the list.
It is important to update the Corporate Office Gateway whenever SmartLSM Security Gateways
are added, deleted, or modified (such as the generation of a new IKE key, a Push Policy action,
or a Push Dynamic Objects action).
Creating a SmartLSM Appliance Cluster
Make sure you have a SmartLSM cluster profile defined in SmartDashboard before you create a
Small Office Appliance cluster in SmartProvisioning.
To create a new SmartLSM Security Cluster:
1. Open SmartProvisioning.
2. In the Devices page, right-click an empty row in the table, select New SmartLSM > Small
Office Appliance Cluster .
The SmartLSM Security Gateway General Properties page opens.
General Properties
1. Enter a unique Cluster Name Prefix (Suffix is optional).
The SmartLSM Security Cluster name is:
<prefix>cluster<suffix>.
2. In
Cluster Main IP Address
, enter the real external virtual IP address for your actual gateway
cluster.
3. Click
Next
.
Cluster Properties
1. In Version , select the firmware version for the Check Point Appliance.
2. In Security Profile , select the SmartLSM Cluster Profile that was created in SmartDashboard
(in the example ClusterProfile1).
3. In
Enable Provisioning
, select this checkbox to enable this gateway to be managed with
provisioning configurations. For more information, see Managing Device Settings (on page 32 ).
4. In No Provisioning Profile , select this option if you want to enable provisioning but are not yet
ready to assign a specific profile.