Open Frames Download Complete PDF Send Feedback Print This Page

Previous

Next

Security Group (asg security_group)

Description

To be part of the Security Gateway, an SGM must belong to the Security Group. SGMs are added to the Security group using the asg security_group command. SGMs in the security group:

  • Are selected during the initial installation procedure (after running: #setup)
  • Are automatically installed once installation of the first SGM has completed
  • Can be changed by using the asg security_group command

Syntax

asg security_group

Example

asg security_group

Output

 
 > asg security_group
 
 +--------------------------------------+
 |       Security Group Utility         |
 +------------------------------------- +
 
 Current Security Group:
 
 +--------------------------------------+
 | Chassis |  Security Gateway Modules  |
 |--------------------------------------|
 |    1    | 1,2,3                      |
 |--------------------------------------|
 |    2    | 1,2,3                      |
 +--------------------------------------+
 
 Choose one of the following options:
------------------------------------
 1) Add SGMs to Security Group
 2) Remove SGMs from Security Group
 3) Exit
 
 

Notes

Select which SGMs should be added or removed from the security group. Note that:

  • An SGM added to the security group automatically joins the single management object of the Security Gateway and then reboots
  • Before you remove an SGM from the security gateway, make sure that its state is DOWN.
  • To optimize connection distribution amongst the SGMs, keep the security group updated with the actual number of SGMs in the appliance.

Important - Run: asg security_group verify to make sure that the security group is correctly configured.

 

 

 

 
Top of Page ©2014 Check Point Software Technologies Ltd. All rights reserved. Download Complete PDF Send Feedback Print