Check Point Smart-1 205, Руководство по началу работы

Страница: 28 / 114

Configuring SmartEvent
28 | Smart-1 205/210 Appliances Getting Started Guide
3. Install the database on all log servers from which SmartEvent reads data: select
Policy > Install Database
and select the log servers as the targets.
4. To allow the SmartEvent server to block attacks from specific IP addresses,
configure the Security Management Server to accept SAM commands from the
SmartEvent server:
a) On the Security Management Server, edit the
$CPDIR/conf/sic_policy.conf
file:
Search for the section [Inbound rules] , and add the following line under #
sam proxy :
DN_Mgmt ; Reporting_Tool; ANY; sam ; sslca
b) From the command line in the Security Management Server computer, run the
following commands:
cpstop
cpstart
Preparing SmartEvent in the Multi-Domain
Server Environment
To connect SmartEvent to one Domain, define the SmartEvent object in the
SmartDashboard of the Domain.
This procedure shows how to connect SmartEvent to all Domains.
To connect SmartEvent to all Domains:
The first stage configuring SmartEvent is to establish connectivity between the
components.
1.
Launch Global SmartDashboard to the Multi-Domain Server.
a) In SmartDashboard, create a new host for each computer that contains a
component of SmartEvent:
b) Select
Manage > Network Object > New > Check Point > Host
.
c) In the
General Properties
window, click
Communication
and enter the
activation key.