Appendix K - Onboarding Quantum IoT Protect on Quantum Maestro Security Group

Prerequisites

You must have one of these:

  • R82 Jumbo Hotfix Accumulator Latest Take

  • R81.20 Jumbo Hotfix Accumulator Latest Take

    • If running on R81.20, disable the SMO Image Cloning on the Quantum Maestro Security Group:

      1. Connect to the command line on the Quantum Maestro Security Group.

      2. If your default shell is the Expert mode, run this command to go to Gaia gClish:

        gclish

      3. To disable the SMO Image Cloning, run:

        set smo image auto-clone state off

        For more information, see the Maestro Administration Guide for your version.

Installing Nano-Agent Manually on Quantum Maestro Security Group

  1. Log in to Check Point Infinity Portal.

  2. In the Quantum section, go to IoT Protect > IoT > Profiles.

  3. Click Quantum Profile.

  4. In the Authentication section, click to copy the token to your clipboard.

  5. Connect to the command line on the Quantum Maestro Security Group.

  6. Log in to the Expert mode.

  7. Run:

    $MDS_FWDIR/bin/nano-egg --install --token <paste token from clipboard> --run-all-members

Verifying the Installation

  1. Log in to Check Point Infinity Portal.

  2. In the Quantum section, go to IoT Protect > IoT > Agents.

  3. Locate the Quantum Maestro Security Group member in the Host column and verify that the agent is connected ().

Known Limitations

Monitoring the nano-agent status on all Quantum Maestro security group members simultaneously using cpnano commands (such as gexec variants, asg) is not supported. However, you can monitor the nano-agent status on each member individually.