Open Frames Download Complete PDF Send Feedback Print This Page

Previous

Next

Installing and Uninstalling Policies

To install a policy on the 61000/41000 Security System, select Policy > Install in SmartDashboard. The installation procedure includes these steps:

  1. The Security Management server installs the policy on the SMO Master.
  2. The SMO copies the policy to all SGMs.
  3. Each SGM installs the policy locally.

During the installation, each SGM sends and receives policy status updates to/from the other SGMs. This is because the SGMs must install their policies in a synchronized manner. Policy installation has these stages:

  • Policy Started - Policy installation started on the SGM.
  • Policy Ready2Finish - Policy installation is completed, but the SGM is waiting for other SGMs to reach the same stage.
  • Policy Completed - The policy is synchronized with the other SGMs.
  • Enforcing Security - The SGM enforces the new policy.

Note - When installing the 61000/41000 Security System, SGMs enforce an initial policy where only the implied rules necessary for management are enforced.

To uninstall a policy:

Open a serial connection to the 61000/41000 Security System and run:

> asg policy unload

Notes:

  • You cannot uninstall policies with SmartDashboard.
  • To learn more about the working with policies, see asg policy.
 
Top of Page ©2014 Check Point Software Technologies Ltd. All rights reserved. Download Complete PDF Send Feedback Print