Configuring Device Settings

Configure the applicable Operating System settings on your Spark Firewall Appliances.

These settings are available when you edit a Plan object (see Plans) and a Gateway object (see Gateways).

You can configure these settings in several ways:

  • Configure the settings in Spark Management in a Plan object.

    Settings in a Plan object apply to all Spark Firewall Appliances that use this Plan.

  • Configure the settings in Spark Management in a Gateway object (to override the settings in a Plan object).

  • Disable the Spark Management settings in a Gateway object and configure the local settings on the Spark Firewall Appliance.

NTP

These settings control the clock synchronization with NTP servers.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > NTP.

  4. Enable the toggle Manage in SMP.

  5. In the Primary NTP Server field, enter the IPv4 address or an FQDN of the primary NTP server.

  6. In the Secondary NTP Server field, enter the IPv4 address or an FQDN of the secondary NTP server.

  7. In the Update Interval (minutes) field, enter the NTP update interval (default: 30, range: 1 - 999).

  8. If these NTP servers require authentication:

    1. Enable the toggle NTP Authentication.

    2. In the Shared Secret field, enter the shared secret.

    3. In the Shared Secret Identifier field, enter the shared secret identifier.

  9. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > NTP.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. In the Primary NTP Server field, enter the IPv4 address or an FQDN of the primary NTP server.

  7. In the Secondary NTP Server field, enter the IPv4 address or an FQDN of the secondary NTP server.

  8. In the Update Interval (minutes) field, enter the NTP update interval (default: 30, range: 1 - 999).

  9. If these NTP servers require authentication:

    1. Enable the toggle NTP Authentication.

    2. In the Shared Secret field, enter the shared secret.

    3. In the Shared Secret Identifier field, enter the shared secret identifier.

  10. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > NTP.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. In the bottom left corner, click the link Access Gateway: Date and Time.

    A browser page opens and shows the progress of the connection to the Gateway.

    Note - If a local administrator is already logged in, click OK to override that connection. Click Cancel to cancel your login attempt.

  8. Configure the local settings in the Device view > System section > Date and Time page.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

Time Zone

These settings control the time zone.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Time Zone.

  4. Enable the toggle Manage in SMP.

  5. In the Local Time Zone field, select the applicable option.

  6. If required in your time zone, enable the toggle Automatically adjust clock for daylight saving changes.

  7. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Time Zone.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. In the Local Time Zone field, select the applicable option.

  7. If required in your time zone, enable the toggle Automatically adjust clock for daylight saving changes.

  8. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Time Zone.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. In the bottom left corner, click the link Access Gateway: Date and Time.

    A browser page opens and shows the progress of the connection to the Gateway.

    Note - If a local administrator is already logged in, click OK to override that connection. Click Cancel to cancel your login attempt.

  8. Configure the local settings in the Device view > System section > Date and Time page.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

Scheduled Reboot

Note - Requires the Gateway to run the firmware R81.10.15 and higher.

These settings control the schedule for rebooting the Gateway:

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Scheduled Reboot.

  4. Enable the toggle Manage in SMP.

  5. Enable the toggle Enable.

  6. In the Reboot recurrence field, select the applicable option - Daily, Weekly, or Monthly.

  7. In the Day of month field, select the applicable day (from 1 to 31).

  8. In the Time of day field, select the applicable time (from 00:00 to 23:59).

  9. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Scheduled Reboot.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. Enable the toggle Enable.

  7. In the Reboot recurrence field, select the applicable option - Daily, Weekly, or Monthly.

  8. In the Day of month field, select the applicable day (from 1 to 31).

  9. In the Time of day field, select the applicable time (from 00:00 to 23:59).

  10. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Scheduled Reboot.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. Configure the local settings in the Spark Firewall Appliance WebUI > in the Device view > System section > System Operations page.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

DNS

These settings control the DNS servers.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > DNS.

  4. Enable the toggle Manage in SMP.

  5. In the DNS Servers section:

    Select the applicable option:

    • Configure DNS server

      and enter enter the IP addresses or the hostnames of the DNS servers.

      These settings apply on all Internet connections on the Gateway.

    • Use DNS servers configured for the active Internet connection(s)

  6. In the DNS Proxy section:

    If the Gateway must work as a DNS proxy for its internal networks, then enable the toggle Enable DNS Proxy.

    Optional: Enable the toggle Resolve Network Objects.

  7. In the Domain Name section:

    In the Domain Name field, enter the applicable string.

  8. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > DNS.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. In the DNS Servers section:

    Select the applicable option:

    • Configure DNS server

      and enter enter the IP addresses or the hostnames of the DNS servers.

      These settings apply on all Internet connections on the Gateway.

    • Use DNS servers configured for the active Internet connection(s)

  7. In the DNS Proxy section:

    If the Gateway must work as a DNS proxy for its internal networks, then enable the toggle Enable DNS Proxy.

    Optional: Enable the toggle Resolve Network Objects.

  8. In the Domain Name section:

    In the Domain Name field, enter the applicable string.

  9. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > NTP.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. In the bottom left corner, click the link Access Gateway: DNS.

    A browser page opens and shows the progress of the connection to the Gateway.

    Note - If a local administrator is already logged in, click OK to override that connection. Click Cancel to cancel your login attempt.

  8. Configure the local settings in the Device view > Network section > DNS page.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

Administrators

These settings control the local administrators.

Note - The first Gateway Administrator is automatically assigned the Super Admin role (this cannot be changed). When Two-Factor Authentication is enabled, all Administrators must be configured with both email and phone number.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Administrators.

  4. Enable the toggle Manage in SMP.

  5. From the top toolbar, click New.

  6. Configure the administrator properties:

    1. Name

    2. Password

    3. Confirm Password

    4. Email

      Supported for Spark Firewall Appliances R81.10.10 and higher.

      Mandatory when Two-Factor Authentication is enabled.

    5. Phone number

      Supported for Spark Firewall Appliances R81.10.10 and higher.

      Mandatory when Two-Factor Authentication is enabled.

    6. Permission

      Select the applicable role:

      • Super Admin (mandatory for the first configured administrator)

      • Read Only Admin

      • Networking Admin

      • Mobile Admin

      • Access Policy Admin

      • Remote Access Admin

      • Self Serve Admin

    7. Click Finish.

  7. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Administrators.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. From the top toolbar, click New.

  7. Configure the administrator properties:

    1. Name

    2. Password

    3. Confirm Password

    4. Email

      Supported for Spark Firewall Appliances R81.10.10 and higher.

      Mandatory when Two-Factor Authentication is enabled.

    5. Phone number

      Supported for Spark Firewall Appliances R81.10.10 and higher.

      Mandatory when Two-Factor Authentication is enabled.

    6. Permission

      Select the applicable role:

      • Super Admin (mandatory for the first configured administrator)

      • Read Only Admin

      • Networking Admin

      • Mobile Admin

      • Access Policy Admin

      • Remote Access Admin

      • Self Serve Admin

    7. Click Finish.

  8. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > NTP.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. In the bottom left corner, click the link Access Gateway: Administrators.

    A browser page opens and shows the progress of the connection to the Gateway.

    Note - If a local administrator is already logged in, click OK to override that connection. Click Cancel to cancel your login attempt.

  8. Configure the local settings in the Device view > System section > Administrators page.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

Self-Serve Portal

Note - Requires the Spark Firewall Appliance to run the firmware R81.10.10 and higher.

This feature is intended for Managed Security Service Providers (MSSPs) to provide a basic Self-Serve Portal on Spark Firewall Appliances for end-users and reduce the operational overhead.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Self-Serve Portal.

  4. Enable the toggle Manage in SMP.

  5. Configure the required settings:

    See Working with Self-Serve Portal.

    1. Enable the required modules.

    2. Configure the required administrators.

  6. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Self-Serve Portal.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. Configure the required settings:

    See Working with Self-Serve Portal.

    1. Enable the required modules.

    2. Configure the required administrators.

  7. Click Save in the bottom right corner.

Personalization

Note - Requires the Spark Firewall Appliance to run the firmware R81.10.10 and higher.

These settings control:

  • The logo image for the Spark Firewall Appliance WebUI that appears:

    • On the login page.

    • In the top right corner.

  • The background color (the color theme) of the top section of the Spark Firewall Appliance WebUI.

  • The branding name (the title) for the Spark Firewall Appliance WebUI that appears:

    • On the login page.

    • In the top left corner.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Personalization.

  4. Enable the toggle Manage in SMP.

  5. Enable the toggle Enable.

  6. Configure the required settings (see the corresponding section below).

  7. Click Save in the bottom right corner.

There are different possible scenarios.

  1. Upload a logo to the Check Point Portal account.

  2. Edit the applicable Plan:

    1. From the left navigation panel, click Plans.

    2. In the Name column, the applicable Plan.

    3. Open the section Device Settings.

    4. Click the Personalization page.

    5. Enable the toggle Manage in SMP to manage these settings only in Spark Management.

    6. Enable the toggle Enable.

    7. Optional: Select the Color theme.

    8. Optional: Configure the Title.

    9. Optional: Configure the Subtitle.

    10. Click Save in the bottom right corner.

  3. Edit each Gateway object:

    1. From the left navigation panel, click Gateways.

    2. In the Name column, click the applicable Gateway object.

    3. Open the section Device Settings.

    4. Click the Personalization page.

    5. If the toggle shows Unlocked from plan, click it (it must change to Locked to plan).

    6. Click Save in the bottom right corner.

  1. Upload a logo to the Check Point Portal account.

  2. Edit the applicable Plan:

    1. From left navigation panel, click Plans.

    2. In the Name column, the applicable Plan.

    3. Open the section Device Settings.

    4. Click the Personalization page.

    5. Enable the toggle Manage in SMP to manage these settings only in Spark Management.

    6. Enable the toggle Enable.

    7. Optional: Select the Color theme.

    8. Optional: Configure the Title.

    9. Optional: Configure the Subtitle.

    10. Click Save in the bottom right corner..

  3. Edit the Gateway objects, in which you do not want to use this logo:

    1. From the left navigation panel, click Gateways.

    2. In the Name column, click the applicable Gateway object.

    3. Open the section Device Settings.

    4. Click the Personalization page.

    5. Click Locked to plan (it must change to Unlocked from plan).

    6. Disable the toggle Enable.

    7. Disable the toggle Manage in SMP.

    8. Click Save in the bottom right corner.

Option 1 - if you did not yet upload a logo and did not configure it in a Plan:

  1. Do not upload a logo to the Check Point Portal account.

  2. There is nothing else to do.

Option 2 - if previously you uploaded a logo and configured it in a Plan:

  1. From left navigation panel, click Plans.

  2. In the Name column, the applicable Plan.

  3. Open the section Device Settings.

  4. Click the Personalization page.

  5. Disable the toggle Enable.

  6. Click Save in the bottom right corner..

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Personalization.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. Enable the toggle Enable.

  7. Configure the required settings (see the corresponding section below).

  8. Click Save in the bottom right corner.

There are different possible scenarios.

  1. If the toggle shows Unlocked from plan, click it (it must change to Locked to plan).

  2. Click Save in the bottom right corner.

  1. Click Locked to plan (it must change to Unlocked from plan).

  2. Enable the toggle Manage in SMP to manage these settings only in Spark Management.

  3. Enable the toggle Enable.

  4. Optional: Select the Color theme.

  5. Optional: Configure the Title.

  6. Optional: Configure the Subtitle.

  7. Click Save in the bottom right corner.

  1. Click Locked to plan (it must change to Unlocked from plan).

  2. Disable the toggle Enable.

  3. Disable the toggle Manage in SMP.

  4. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > NTP.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. Configure the local settings in the Spark Firewall Appliance WebUI:

    1. From the left navigationi panel, click the Device view.

    2. In the Advanced section, click the Advanced Settings page.

      See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

    3. Search for this parameter:

      Web Interface Settings and Customizations - Use a company logo in the appliance's web interface

    4. Click Edit.

    5. Select Use a company logo in the appliance's web interface.

    6. Upload the image.

    7. Optional: Configure the company URL.

    8. Click Save.

    9. Log out.

    10. Log in.

    Note - To revert this change:

    1. Search for this parameter.

    2. Click Edit.

    3. Click Restore Defaults.

    4. Click Save.

Two-Factor Authentication

These settings control Two-Factor Authentication for all local administrators.

Prerequisite: All administrator users must have both an email address and a phone number configured. See Administrators.

Watch the Video

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Two-Factor Authentication.

  4. Enable the toggle Manage in SMP.

  5. Select Enable Two-Factor Authentication for all administrators in this gateways.

  6. Select I confirmed all admins have email and phone configured.

  7. Click Enable.

  8. Click Save in the bottom right corner.

    Note - When Two-Factor Authentication is enabled, administrators receive an email that contains a QR code used to configure the authenticator application.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Two-Factor Authentication.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. Select (or clear) Enable Two-Factor Authentication for all administrators in this gateways.

  7. Select I confirmed all admins have email and phone configured.

  8. Click Enable.

  9. Click Save in the bottom right corner.

    Note - When Two-Factor Authentication is enabled, administrators receive an email that contains a QR code used to configure the authenticator application.

Users

Notes:

  • Requires the Spark Firewall Appliance to run the firmware R81.10.05 and higher.

  • The main purpose of creating users is to configure secure Remote Access VPN access.

These settings control local users.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Users.

  4. Enable the toggle Manage in SMP.

  5. From the top toolbar, click New.

  6. Configure the user properties:

    1. Name

    2. Password

    3. Confirm Password

    4. Email

    5. Phone Number

    6. Comments

    7. Remote Access (enables Remote Access VPN access for this user)

    8. Click Finish.

  7. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Users.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. From the top toolbar, click New.

  7. Configure the user properties:

    1. Name

    2. Password

    3. Confirm Password

    4. Email

    5. Phone Number

    6. Comments

    7. Remote Access (enables Remote Access VPN access for this user)

    8. Click Finish.

  8. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Users.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. Configure the local settings in the Spark Firewall Appliance WebUI > in the Users and Objects view > Users Management section > Users page.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

Local Network

These settings control the local network "pools" to manage local networks for specific interfaces.

Important:

  • This feature is available on Spark Firewall Appliances that run the firmware R81.10.10 or higher.

  • Networks configured in this section will be set as local networks on the Gateway, and added to the Internal Network Topology.

  • The Spark Firewall 1600 / 1800 / 1900 / 2000 series must serve as the Center Gateway.

  • The Center Gateway must have a static IP address (in a cluster, a static Virtual IP address).

  • In a Plan, this configuration applies only to newly created Gateway objects that you assign to this plan.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Local Network.

  4. Enable the toggle Manage in SMP.

  5. From the top toolbar, click Add.

    Note - This action applies immediately after you click Finish and could impact the existing connections on the Gateway.

  6. In the Choose network interface section:

    1. In the Network interface field, select the applicable interface that exists on the Gateways.

    2. Optional: In the SSID to match field, enter the applicable SSID to select the Wi-Fi network.

      This field appears only if in the Network interface field you selected the option WIFI 2.4 or WIFI 5

      If you configure this option, the Wi-Fi network is selected based on the configured SSID. Otherwise, the first available Wi-Fi network is selected.

  7. Select Assign Automatically or Assign Manually.

    Notes:

    • If you Select Assign Automatically, select the network range pool from which to generate the Local Network and click Apply.

    • If you select Assign Manually, enter the IP Address and Subnet Mask and click Apply.

  8. In the Choose pools to use by priority section:

    1. From the top toolbar, click Add.

    2. Click the applicable network pool.

    3. Click Finish.

    4. Repeat the steps 8a-8c as needed.

  9. Click Finish.

  10. Repeat the steps 5-9 as needed.

  11. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Local Network.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. From the top toolbar, click Add.

    Notes:

    • This action applies immediately after you click Finish and could impact the existing connections on the Gateway.

    • The networks you add on the Local Network page, are automatically added in the Gateway object > VPN section > Internal Network Topology page.

  7. In the Choose network interface section:

    1. In the Network interface field, select the the applicable interface that exists on the Gateways.

    2. Optional: In the SSID to match field, enter the applicable SSID to select the Wi-Fi network.

      This field appears only if in the Network interface field you selected the option WIFI 2.4 or WIFI 5

      If you configure this option, the Wi-Fi network is selected based on the configured SSID. Otherwise, the first available Wi-Fi network is selected.

  8. Select the applicable option:

    1. Assign automatically

      Select the network range pool from which to generate the Local Network

    2. Assign manually

      Enter the IP Address and select the Subnet Mask and click Apply.

  9. Click Apply.

  10. Repeat the steps 6-9 as needed.

  11. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Local Network.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. Configure the local settings in the Spark Firewall Appliance WebUI > in the Device view > Network section > Local Network page.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.

Probing Settings

Note - Requires the Spark Firewall Appliance to run the firmware R81.10.10 / R81.10.15 and higher.

These settings control how the Gateway probes its Internet connections to determine their quality.

You can see the probing results in Working with Logs and Events > on the Internet Monitoring tab.

  1. From the left navigation panel, click Plans.

  2. In the Name column, click the applicable Plan object.

  3. In the Plan Edit page, click Device Settings > Probing Settings.

  4. Enable the toggle Manage in SMP.

  5. In the Quality Check Methodology: section, select the applicable option:

    1. Select the applicable method:

      • Best Practice

      • Specific destination

        1. In the First host field, enter the applicable IPv4 address or an FQDN.

        2. In the Second host field, enter the applicable IPv4 address or an FQDN

        3. In the Third host field, enter the applicable IPv4 address or an FQDN

        4. In the Probing result field, select the applicable option:

          • Best

            Selects the lowest values from the probing results based on packet loss, latency, and jitter.

          • Average

            Selects the average values from the probing results based on packet loss, latency, and jitter.

          • Worst

            Selects the highest values from the probing results based on packet loss, latency, and jitter.

    2. In the Probing interval field, enter the applicable number.

  6. In the Thresholds section, enter the maximum applicable values:

    1. Latency up to

    2. Jitter up to

    3. Packet loss up to

  7. Enable the toggle Probing Mode.

    Note - Requires the Spark Firewall Appliance to run the firmware R81.10.15 and higher.

  8. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Probing Settings.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Enable the toggle Manage in SMP.

  6. In the Quality Check Methodology: section, select the applicable option:

    1. Select the applicable method:

      • Best Practice

      • Specific destination

        1. In the First host field, enter the applicable IPv4 address or an FQDN.

        2. In the Second host field, enter the applicable IPv4 address or an FQDN

        3. In the Third host field, enter the applicable IPv4 address or an FQDN

        4. In the Probing result field, select the applicable option:

          • Best

            Selects the lowest values from the probing results based on packet loss, latency, and jitter.

          • Average

            Selects the average values from the probing results based on packet loss, latency, and jitter.

          • Worst

            Selects the highest values from the probing results based on packet loss, latency, and jitter.

    2. In the Probing interval field, enter the applicable number.

  7. In the Thresholds section, enter the maximum applicable values:

    1. Latency up to

    2. Jitter up to

    3. Packet loss up to

  8. Enable the toggle Probing Mode.

    Note - Requires the Spark Firewall Appliance to run the firmware R81.10.15 and higher.

  9. Click Save in the bottom right corner.

  1. From the left navigation panel, click Gateways.

  2. In the Name column, click the applicable Gateway object.

  3. In the Gateway Edit page, click Device Settings > Probing Settings.

  4. Click Locked to plan (it must change to Unlocked from plan).

  5. Disable the toggle Manage in SMP.

  6. Click Save in the bottom right corner.

  7. Configure the local settings in the Spark Firewall Appliance WebUI > in the the Device view > Network section > Internet page

    • If there is only one Internet connection configured:

      1. Click the link Configure monitoring.

      2. Configure the applicable settings.

      3. Click Save.

    • If there are two or more Internet connections configured:

      1. In the section Multiple Internet connections, click the link Configure.

      2. Configure the applicable settings.

      3. Click Save.

    See the R81.10.X Spark Firewall Locally Managed Administration Guide for 1500, 1600, 1800, 1900, 2000 Appliances and the R82.00.X Spark Firewall Appliances Locally Managed Administration Guide.