Check Point VSX 12200 manuale d’uso

24 November 20 11 Getting Started G uide Check Point 12000 VSX R67.10 P/N 704707 Models: P-210, P-220, P-230[...]

© 2011 Check Point Software Tec hnologies Ltd. All rights reserved. T his product and relate d docum entation are protected b y copyright and distributed und er licensing restricting th eir use, cop ying, distribution, and decom pilation. No part of this product or rel ated documentation m ay be reproduced in any form or by any means without pri o[...]

Important Inf ormation Latest Software W e recommend that you install the m ost recent softwar e release to stay up - to - date with the l atest functional improvem ents, stability fixes, securit y enhancements and protectio n against new and e volving attack s. Latest Documentation The latest version of this document is at: http://supp ortconte nt[...]

W elc ome Safety, Environmental, and Electronic Emissions Notices Page 4 Safety, Environm ental, and Electronic Emissions Notic es Read the following warnings bef ore setting up or using the appliance. Warning - Do not b lock air vents. A minim um 1/2-inch c learance is required. Warning - T his appliance does not conta in any user -serviceable par[...]

W elc ome Safety, Environmental, and Electronic Emissions Notices Page 5 4. Circuit Overloading - Considerati on should be given t o the connection of the equipm ent to the supply circuit and the eff ect that overloading of th e circuits might have on over current pro tect ion and sup ply wiring. Appropriate cons ideration of equipm ent nameplate r[...]

W elc ome Safety, Environmental, and Electronic Emissions Notices Page 6 Canadian Department Compliance Statement: This Class A digita l apparatus com plies with Canadian ICE S-003. Cet appareil num érique de la classe A est conforme à la norm e NMB-003 du C anada. This Class B digita l apparatus com plies with Canadian ICES -003. Cet appareil nu[...]

Contents Important Infor mation ............................................................................................. 3 Safety , Environmental, and Elect ronic Emissions Notices .................................. 4 Introduction ............................................................................................................. 9 We[...]

Registration and Su pport ..................................................................................... 35 Registration ........................................................................................................ 35 Support ..........................................................................................................[...]

Page 9 Chapter 1 Introduction In This Chapter W elco m e 9 Check Point 12000 V SX Overview 9 VSX Overview 9 Important Solutions 10 Shipping Carton Co ntents 10 Welcome Thank you for choos ing Check Point 12000 VSX. W e hope that you will be sat isfied with this s ystem and our support services. Check Point products pro vide your business with the m[...]

Important Solutions Introduction Page 10 A VSX gatewa y contains a complete set of virtual devic es that function as ph ysical network components, such as Securit y Gateways, routers, s witches, interfaces , and even network cables. Centrall y managed, and incorporating k ey network resources internally, VSX allo ws businesses to deplo y com prehen[...]

Page 11 Chapter 2 Rack Mounting This chapter describes how to mount the ap pliance in a rac k. Important - T wo people are required to install the appliance in a r ack in order to preve nt any possible dam age. In This Chapter Rack Mounting Hard ware and T ools 11 Rack Mounting Chec k Point 12200 VSX 12 Rack Mounting Chec k Point 12400 and 126 00 V[...]

Rack Mounting Check Point 12200 VSX Rack Mounting Page 12 Rack Mounting Check Point 12200 VSX A tt aching the Ear Mount Brackets to the A ppliance Attach the two ear m ount brackets to the fr ont of the appliance. Note - The ear m ount screws have 5 mm heads. To attach the ear mount brackets to the applia nce: 1. Attach the appliance ear brack et t[...]

Rack Mounting Check Point 12200 VSX Rack Mounting Page 13 To attach the ra il plates: 1. Attach a rail plate to an appliance ra il using two applianc e rail screws. 2. Do step 1 again for the other r ail plate and appliance rail. This figure shows the as sem bled rail plate and applianc e rail. A tt aching the A ppliance Rails to the A ppliance Att[...]

Rack Mounting Check Point 12200 VSX Rack Mounting Page 14 Installing the A ppliance in the Rack Install the appliance i n the rack . It may be necessar y to adjust the appliance rails t o secure the appl iance to the rack. Important - T wo people are required to install the appliance in a r ack in order to preve nt personal injur y or damage to the[...]

Rack Mounting Check Point 12400 and 12600 VSX Rack Mounting Page 15 Rack Mounting Check Point 12400 and 12600 VSX A tt aching the Ear Mount Brackets to the A ppliance Attach the two ear m ount brackets to the fr ont of the appliance. To attach the ear mount brackets to the applia nce: 1. Attach the appliance ear brack et to one side of the applianc[...]

Rack Mounting Check Point 12400 and 12600 VSX Rack Mounting Page 16 To attach the ra il plates: 1. Attach a rail plate to an appliance ra il using four applia nce rail screws. 2. Do step 1 again for the other rail plate and appliance rail. This figure shows the as sem bled rail plate and applianc e rail. A tt aching the A ppliance Rails to the A pp[...]

Rack Mounting Check Point 12400 and 12600 VSX Rack Mounting Page 17 Installing the A ppliance in the Rack Install the appliance i n the rack . It may be necessar y to adjust th e appliance rai ls to secure the a ppliance to the rack. Important - T wo people are required to install the appliance in a r ack in order to preve nt personal injur y or da[...]

Page 18 Chapter 3 Configuring Check Point 1 2000 VSX The workf low for configuring Check Point 12000 VSX is : 1. Mount the Check Point 12000 VSX in the rac k. 2. Connect the cables an d power on. 3. Use the First T ime Wizard to configure the ap pliance. 4. Configure VSX in Sm artDashboard and inst all a po licy. Note - Check Point 12000 VSX m ust [...]

Initial Configuration Configuring Check Point 12000 VSX Page 19 3. W ait for the appliance to initialize and boot. T he status of the appl iance appears on the LCD screen: The appliance is re ady to use when the model num ber is displayed. Initial Configuration Logging in for the First Time Check Point 12000 V SX includes a First T ime W izard to h[...]

Initial Configuration Configuring Check Point 12000 VSX Page 20 The Welcome window opens. 8. T y pe n . The Netw ork Configuration window opens. 9. Use the menus and windows to set t he Host Name , Domain Name , a nd Domain Name Servers . 10. Enter n . The Netw ork Connections windo w opens. Configuring the Management Interface Use the Network Conf[...]

Initial Configuration Configuring Check Point 12000 VSX Page 21 The Change IP setting s windo w opens. 5. Enter an IP address, n etwork mask , and broadcast address for the Managem ent interface. 6. Enter e twice to return t o the Netw ork Configuration windo w. 7. Enter 5 . The Routing window opens. 8. Enter 1 . The Set Default Gatew ay windo w op[...]

Confirming the Build Numbers Configuring Check Point 12000 VSX Page 22 Confirming the Build Numbers Confirm that the system has the m ost recent build num bers. Run these CLI com mands to displa y the build number for thes e products. Product Command VSX Appliance Build SecurePlatform VSX ver This is Check Point SecurePlatform Pro VSX NGX R67.10 Bu[...]

Page 23 Chapter 4 Check Point 1200 0 VSX Hardware This chapter provides i nstructions for instal ling and rem oving hardware components on C heck Point 12000 VSX. In This Chapter Front Panel Com ponents 23 Rear Panel Com ponents 27 Using the LCD Panel 28 Front Panel Components The section descr ibes the hardware on t he front panel of the appliance[...]

Front Panel Components Check Point 12000 VSX Hardware Page 24 Expansion Line C ar d Option s Expansion line cards ca n have two, f our, or eight ports. T hese types of expansion line cards are available : Model Description CPAC-2- 10F 2 Port 10GBase-F SF P+ (without tra nsceivers) CPAC-4- 1C 4 Port 10/100/1000 Base-T RJ- 45 CPAC-4- 1F 4 Port 1000Ba[...]

Front Panel Components Check Point 12000 VSX Hardware Page 25 Item Component Description 10 Synchronization port For synchronizing with cluster m embers or a high availabilit y peer 11 Expansion line card Expansion slot 12 Expansion line card Expansion slot Expansion Line C ar d Option s Expansion line cards ca n have two, f our, or eight ports. T [...]

Front Panel Components Check Point 12000 VSX Hardware Page 26 Item Component Description 6 Management port For an Ethernet connect ion to a remote m anagement com puter 7 LOM port LOM (Light Out Mana gement) port for the optional LO M card 8 Expansion line card 8 Port 10/100/1000 Base-T RJ-45. Model: CPA P-ACC-8- 1C 9 USB ports 10 Synchronization p[...]

Rear Panel Components Check Point 12000 VSX Hardware Page 27 Rear Panel Components This section desc ribes the hardware on the rear panel of the appliance. Check Point 12200 VSX Rear Panel Item Component Description 1 Power supply unit If a power suppl y fails or is not connected to the outlet, an alarm sounds continuous ly. 2 Power supply placehol[...]

Using the LCD Panel Check Point 12000 VSX Hardware Page 28 Using the LCD Panel The appliance has an LCD panel that you can use to do basic m anagem ent operations. You can co nfigure the managem ent IP address, netm ask, and default gat eway of the appliance. You can reboot the a ppliance. Menu Options Menu Sub-menu Purpose Network Set Mgmt IP Set [...]

Replacing Power Supplies Customer Replaceable Parts Page 29 Customer Replac eable Parts To ensure m aximum availability and ease of maintenance, the Ch eck Point 1200 0 VSX contains the following custom er replaceable parts: 12200 VSX 12400 VSX 12600 VSX Power supply units 1 Power suppl y unit 1 Place holder unit 2 2 Expansion line card 1 1 (2 opti[...]

Replacing Expansion Line Cards Customer Replaceable Parts Page 30 Removing Power Supplies This section desc ribes how to rem ove a power suppl y or placeholder un it from the appliance. To remov e a power supply unit : 1. If the alarm sounds, press the red alarm button to the right of the power suppl y. The alarm stops. 2. Remove the power c ord fr[...]

Replacing Expansion Line Cards Customer Replaceable Parts Page 31 Check Point 12200 VSX The built-in Ethernet ports (ET H1 - ETH7) are not custom er replaceable. Check Point 12400 and 12600 VSX Removing Expansion Line Cards To remov e an expansion line card : 1. Power off the applianc e and rem ove the power cords f rom the power sup ply units. 2. [...]

Replacing Hard Disk Drives on Check Point 12200 VSX Customer Replaceable Parts Page 32 Replacing Hard Disk Drives on Check Point 12200 VSX This section desc ribes how to rem ove or install a hard disk drive in a Chec k Point 12200 VSX a ppliance. Removing a Hard Disk Driv e To remove a hard d isk drive f rom a Check Point 1220 0 VSX: 1. Using the k[...]

Replacing Hard Disk Drives on Check Point 12400 and 12600 VSX Customer Replaceable Parts Page 33 Replacing Hard Disk Drives on Check Point 12400 and 12600 VSX This section desc ribes how to rem ove or install a hard disk drive in a Chec k Point 12400 and 126 00 VSX appliance. Removing a Hard Disk Drive To remove a hard d isk drive f rom a Check Poi[...]

Page 34 Chapter 5 VSX Appliance Rec overy VSX comes preloaded on your Check Point 12000 VSX appliance. If, for an y reason, you need to reinstall VSX on the applianc e, follow this proc edure. To reinstall VSX software on the app liance: 1. Connect to the app liance consol e using the designat ed cord received i n your shipping carton (RJ 45/D - su[...]

Page 35 Chapter 6 Registration and Support In This Chapter Registration 35 Support 35 W here To From Here? 35 Registration Check Point 12000 V SX requires a specific Ch eck Point license. O btain a license and register at the Check Point Appliance Reg istration site ( http://register.c heckpoint.com /cpapp ). Note - The MAC addr ess of the m anagem[...]

Page 36 Appendix A Compliance Information This appendix contai ns declaration of conformit y, compliance, and related regulator y information. In This Appendix Declaration of Conf ormit y 36 Declaration of Conformity Manufacturer’s Nam e: Check Point Soft ware Technologies Ltd . Manufacturer’s Address: 5 Ha'Solelim Street, Tel Aviv 67897, [...]

Declaration of Conformity Compliance Information Page 37 EN61000-4- 2 Information Tec hnology Equipm ent - Electrostat ic Discharge Imm unity EN61000-4- 3 Information Techno logy Equipm ent - Radiated RF Immunity EN61000-4-4 Information Techno logy Equipm ent - Fast T ransient Immunity EN61000-4-5 Information Techno logy Equipm ent - Surge Imm unit[...]