Check Point 4207-HA manual

31 October 2011 Getting Started G uide Check Point 4000 Appliances Models: T-120, T-160 and T- 180[...]

© 2011 Check Point Software Technologies Ltd. All rights reserved. T his product and related d ocumentation are protect ed by copyright and distribut ed under licensing restricting th eir use, copying, distribut ion, and decom pilation. No part of this produc t or related documentation m ay be reproduced in an y form or b y any m eans without prio[...]

Important Information Latest Software W e reco mmend that you install the most rec ent software release to st ay up - to -date with the latest functional improvem ents, stability fixes, security enhancem ents and protection aga inst new and evolving attack s. Latest Documentation The latest version of this document is at: http://supp ortcontent.c h[...]

W el come Safety, Environmental, and Electronic Emissions Notices Page 4 Safety, Environm ental, and Electronic Emissions Notic es Read the following warnings before s etting up or using the appli ance. Warning - Do not b lock air vents. A m inimum 1/2 -inch clearance is required. Warning - T his appliance does not contain any user-service able par[...]

W el come Safety, Environmental, and Electronic Emissions Notices Page 5 4. Circuit Overloading - Consideration sh ould be given to the co nnection of the equi pment to the suppl y circuit and the eff ect that overloading of the circ uits might have on over curr ent protection and sup ply wiring. Appropriate cons ideration of equ ipment nam eplate [...]

W el come Safety, Environmental, and Electronic Emissions Notices Page 6 Canadian Department Compliance Statement: This Class A digita l apparatus com plies with Canadian ICE S-003. Cet appareil numérique de la class e A est conforme à la norm e NMB-003 du Cana da. This Class B digita l apparatus com plies with Canadian ICES -003. Cet appareil nu[...]

Contents Important Infor mation ............................................................................................. 3 Safety , Environmental, and Elect ronic Emissions Notices .................................. 4 Introduction ............................................................................................................. 8 We[...]

Page 8 Chapter 1 Introduction In This Chapter W elco me 8 Check Point 4000 Appliances Overview 8 Shipping Carton Co ntents 9 Term inology 9 Welcome Thank y ou for choos ing Check Point’ s C heck Point 4000 App liances. W e hope that you will be satisfied with this system and our s upport services. C heck Point products prov ide your business with[...]

Shipping Carton Contents Introduction Page 9 N ote - Screenshots in this guide ma y appl y only to the highest m odel to which this guide ap plies. Shipping Carton Contents This section desc ribes the contents of the shi pping carton. Item Description Appliance Check Point 4000 Appliance Rack Mounting Acc essories Hardware mounting k it Cables  [...]

Page 10 Chapter 2 Rack Mounting This chapter describes how to mount the appl iance in a rack . Important - T wo people are required to insta ll the appliance in a rac k in order to prevent any possible dam age. In This Chapter Rack Mounting Hard ware and Tools 10 Attaching the Ear Mo unt Brack ets to the Appliance 11 Attaching the Rail Plates 11 At[...]

Attaching the Ear Mount Brackets to the Appliance Rack Mounting Page 11 Attaching the Ear Mount Brackets to the Appliance Attach the two ear m ount brackets to the front of the appliance. Note - The ear m ount screws have 5 mm heads. To attach the ear mount brackets to the applia nce: 1. Attach the appliance ear bracket to one side of the appliance[...]

Attaching the Appliance Rails to the Appliance Rack Mounting Page 12 Note - The app liance rail screws have 8 m m heads. To attach the ra il plates: 1. Attach a rail plate to an appliance rail us ing two appliance rail scre ws. 2. Do step 1 again for the other rail plate and ap pliance rail. This figure sho ws the assem bled rail plate and applianc[...]

Installing the Appliance in the Rack Rack Mounting Page 13 2. Attach the appliance ra ils to the appliance using thre e appliance rail scr ews. 3. Do steps 1 and t wo again for the other s ide of the appliance. Installing the Appliance in the Rack Install the appliance i n the rack . It may be necessary to adjust the appl iance rails to secure th e[...]

Page 14 Chapter 3 Configuring Check Point 4 000 Appliances The workf low for configuring Check Point 4 000 Appliances is: 1. Connect the cables an d power on the appliance. 2. Use the First T ime Configuration W izard to configure the appliance. 3. Add the Check Point 4000 Appliances object in Sm artDashboard a nd install a polic y. In This Chapter[...]

Using the First Time Configuration Wizard Configuring Check Point 4000 Appliances Page 15 3. W ait for the appliance to initialize and boot. T he status of the appliance ap pears on the LCD scr een: The appliance is re ady for use when the m odel number is displa yed. Using the First Time Configuration Wizard Perform the initial c onfiguration of C[...]

Using the First Time Configuration Wizard Configuring Check Point 4000 Appliances Page 16 Note - The f eatures configured in the wizard are accessible after completing the wizard via the W ebUI menu. The W ebUI menu can be accessed by navigating to https://<appliance_ip_address>:4434 . 5. Change the adm inistrator password, as prom pted. The [...]

Using the First Time Configuration Wizard Configuring Check Point 4000 Appliances Page 17 Management Type Set how the appliance is managed in the Managemen t Type page.  Locally Managed Deplo yment : The appliance is a Security Gateway and a Security Managem ent server. The Securit y Management server m anages the Securit y Policy that is enforc[...]

Creating the Network Object Configuring Check Point 4000 Appliances Page 18 Note - Do not use the Any va lue for security reasons. After you com plete the First Time Conf iguration W iz ard, m ore options are available using th e WebUI menu. SIC Setup Configure the SIC (Secure Internal Com munication) settings f or a Cent rally Managed appliance. E[...]

Page 19 Chapter 4 Check Point 4000 Appliances Hardware This chapter provides i nstructions for installing a nd removing hardware com ponents on Check Point 4000 Appliances. In This Chapter Front Panel Com ponents 19 Rear Panel Com ponents 23 Customer Replace able Parts 24 Front Panel Components This section desc ribes the features and com ponents l[...]

Front Panel Components Check Point 4000 Appliances Hardware Page 20 Check Point 4600 Front Panel Item Description 1 Expansion line card s lot 2 Built in Ethernet ports (ET H1 - ET H7) 3 Management conf iguration port - Et hernet connection to a rem ote managem ent workstation 4 USB ports 5 Console port - A ser ial connection to the ap pliance using[...]

Front Panel Components Check Point 4000 Appliances Hardware Page 21 Item Description 8 LCD display screen 9 Keypad Using the LCD Panel The appliance has an LCD panel that can be used to perform basic management operation s . You can select DHCP or configure the IP address, subnet n etmask, and default gatewa y of the managem ent interface. The appl[...]

Front Panel Components Check Point 4000 Appliances Hardware Page 22 To Press Approve the change when the cursor is located on the last digit Cancel the IP change when the cursor is located on the firs t digit Change current digi t or Configuring Management DHC P You can use the LCD panel to enable or disa ble DHCP on the m anagement interfac e. To [...]

Rear Panel Components Check Point 4000 Appliances Hardware Page 23 c) W hen th e panel shows t he correct IP address, m ove the cursor to the las t digit and press Enter . The panel shows Ne twork > Set M gmt IP . 6. Do steps 3 - 5 aga in for the subnet netm ask and the default gate way IP address. 7. Press Esc until the panel s hows the applian[...]

Customer Replaceable Parts Check Point 4000 Appliances Hardware Page 24 Customer Replaceable Parts To ensure m aximum availability and ease of m aintenance, the Check Point 4000 Appliances cont ain the following custom er replaceable parts: 4200/4600 4800 Power supply slots n/a 2 Expansion line card Optional Optional Unless directed to do so by Che[...]

Customer Replaceable Parts Check Point 4000 Appliances Hardware Page 25 Removing the Po wer Supply This section desc ribes how to rem ove a power supply or place holder unit from a Check Point 4800 appliance. To remov e a power supply unit : 1. If the alarm sounds, press the red alarm button to the right of the po wer supply. The alarm stops. 2. Re[...]

Customer Replaceable Parts Check Point 4000 Appliances Hardware Page 26 Installing Expan sion Line Cards To install an expansion line card : 1. Power off the applianc e and rem ove the power cords from the power supply units. 2. Loosen the retaining scr ews on the m etal cover on the front of the appl iance. 3. Holding the screws, rem ove the m eta[...]

Page 27 Chapter 5 Restoring Fact ory Defaults As part of the troubles hooting process, it m ay be necessar y to restore the appliance to its factor y default settings. You can restore your appliance to the factor y default image using one of the following m ethods:  Using the W ebUI  Through the console b oot m enu  Using the LCD pan el Im[...]

Restoring Using the LCD Panel Restoring Factory Defaults Page 28 7. During the boot process , text sim ilar to that shown below appears: 8. At this point, you ha ve approximatel y four secon ds to hit any key to activate the Boot menu. 9. The Boot m enu opens. Scroll to the rele vant Reset to factory default s image and pres s Enter . Restoring Usi[...]

Restoring Using the LCD Panel Restoring Factory Defaults Page 29 6. Once you have confir med the reset, wai t for the applia nce to restore the factor y image. While the appliance is restored t o the default im age, this message is continuousl y displayed: Reverting image don't turn off . After the appliance is restored to its default factor y[...]

Page 30 Chapter 6 Registration and Support In This Chapter Registration 30 Support 30 W here To From Here? 30 Registration The appliance req uires a product- specific Check Point license. Obtain a license and register at the Check Point Appliance Reg istration site ( h ttp://register.checkpoint.c om/cpapp ) . Support For additional techn ical infor[...]

Page 31 Appendix A Compliance Information This appendix contai ns declaration of c onformity, compliance, and rel ated regulatory inform ation. In This Appendix Declaration of Conf ormit y 31 Declaration of Conformity Manufacturer’s Nam e: Check Point Soft ware Technologies Ltd. Manufacturer’s Address: 5 Ha'Solelim Street, Tel Aviv 67897, [...]

Declaration of Conformity Compliance Information Page 32 EN61000-4- 2 Information Techno logy Equipment - Electrostatic Discharge Imm unity EN61000-4- 3 Information Techno logy Equipment - Radiated RF Immunity EN61000-4-4 Information Techno logy Equipment - Fast Transient Immunity EN61000-4-5 Information Techno logy Equipment - Surge Imm unity EN61[...]