Configuring the Check Point Appliance Gateways

See your Check Point Appliance Getting Started Guide for full instructions to set up and connect the Check Point Appliance.

This is the general workflow:

1. Connect your computer to the Check Point Appliance on its LAN1 interface.
2. Configure your computer to get an IP address automatically.
3. Open your Web browser, and connect to: http://my.firewall

   When you configure two Check Point Appliance gateways from your web browser, connect only one to a power source. Follow the instructions below to configure it and then disconnect it from the power source. Then do the same for the second appliance and reboot it at the end.

   If you do not follow these instructions, you cannot use the http://my.firewall URL correctly and you need to connect with the gateway's actual IP address. (That IP address is initially 192.168.1.1 on LAN1 before you configure it with the Check Point Appliance).

   After you configure and connect both appliances to a power source, install a policy and renew the dynamic IP of the computer. You can then use http://my.firewall to access the active member of the cluster.

4. Follow the steps to configure the Check Point Appliance with the First Time Configuration Wizard.
5. On the appliance's local network, configure the cluster SYNC interface on the same subnet as the SYNC interface of the second cluster member (use a cross Ethernet cable for SYNC interface connection).

   When you use the SmartDashboard cluster wizard, the LAN2 interface is the SYNC interface between cluster members. You do not have to configure an IP on LAN2 at any stage of the gateway side configuration. If you do not configure them, LAN2 SYNC interfaces are automatically set to 10.231.149.1 and 10.231.149.2. To set a different SYNC interface (not LAN2), see sk52500.

   Remember the one-time password. You need it to configure the cluster in SmartDashboard. It must be the same on both clusters.

   IP addresses must be configured on both cluster members before you open SmartDashboard and run the Cluster configuration wizard. To configure IPs in interfaces other than WAN and LAN1, do so in each gateway’s WebUI application with the Internet or Local Network pages. Make sure that for each interface that is part of the cluster, you configure an IP in the same subnet as the second cluster member.