Open Frames Download Complete PDF Send Feedback Print This Page

Previous

Next

SGM Policy Management

Because the 61000/41000 Security System works as one large Security Gateway, all SGMs are configured with the same policy. When you install a policy from the management server, it first installs the policy on the SMO. The SMO copies the policy and SGM configuration to all SGMs in the Up state. When an SGM enters the Up state, it automatically gets the currently installed policy and configuration from the SMO. If there is no SMO (when there is only one SGM in the Up state), that SGM uses its local policy and configuration.

If there are problems with the policy or configuration on an SGM, you can manually copy the information from a different SGM.

An SGM configuration has these components:

  • The Firewall policy, which includes the Rulebase.
  • Set of configuration files defined in the /etc/xfer files list file. This file contains the location of all related configuration files. It also defines the action to take if the copied file is different from the one on the local SGM.

Related Topics

Copying the Policy and Configuration (asg_blade_config pull_config)

Understanding the Configuration File List

 
Top of Page ©2014 Check Point Software Technologies Ltd. All rights reserved. Download Complete PDF Send Feedback Print