Deployment Options

In This Section: Product Deployment Scenarios Installation and Recovery During Product Deployment

Product Deployment Scenarios

There are different deployment scenarios for Check Point software products.

• Standalone Deployment - The Security Management Server and the Security Gateway are installed on the same computer or appliance.

	Item	Description
	1	Standalone computer
		Security Gateway component
		Security Management Server component

• Distributed Deployment - The Security Gateway and the Security Management Server are installed on different computers or appliances.

	Item	Description
	1	Security Management Server
	2	Network connection
	3	Security Gateway
		Security Gateway component
		Security Management Server component

• Standalone Full HA - Security Management Server and Security Gateway are each installed on one appliance, and two appliances work in High Availability mode.

	Item	Description
	1	Primary appliance
	2	Direct appliance to appliance connection
	3	Backup appliance
		Security Gateway component
		Security Management Server component

• Bridge Mode - Add a Security Gateway to an existing environment without changing IP Routing.

	Item	Description
	1 and 2	Switches
		Security Gateway Firewall bridging Layer-2 traffic over the one IP address, with a subnet on each side using the same address.

• Management HA - A Primary and Secondary Security Management Server are configured. The databases of the Security Management Servers are synchronized, either manually or on a schedule, so they can back up one another. The administrator makes one Security Management Server Active and the other(s) Standby. If the Active Security Management Server is down, the administrator can make the Standby server Active.

	Item	Description
	1	Primary Security Management Server
	2	Direct or indirect Security Management Server to Security Management Server connection
	3	Secondary Security Management Server
		Security Management Server component

Installation and Recovery During Product Deployment

This feature is supported in R77.10 and higher.

You can do a clean installation, or restore an earlier installation, with the First Time Configuration Wizard.

Run the First Time Configuration Wizard when connecting to an appliance for the first time, or after installing Gaia on an open server.

Installing a version available locally on your device

If there is more than one image on the appliance or open server, you can install a different image.

To install a factory-default Gaia image that is available locally:

In the First Time Configuration Wizard, select Install a version available locally on your device.

Installing a version from the Check Point Cloud

To install a factory-default Gaia image from the Check Point Cloud:

1. In the First Time Configuration Wizard, select Install a version from Check Point Cloud. Click Next.
2. Define the Connection to Check Point Cloud. Choose an interface to connect to the Internet, and configure connection parameters. Click Next.

   This shows the versions that you can install from the Check Point Cloud.

3. Choose the version to install. Click Finish.

To install using an ISO on a USB device:

1. Create a Check Point USB installation device using ISOmorphic.
2. Insert the USB device into your appliance and click Finish.

   The appliance reboots and the installation starts.

3. Follow the installation from the console.

   To follow the installation on an IP Appliance see sk83200.

Version Recovery from the Check Point Cloud

Use this option to install the version that was installed on an appliance that was returned to Check Point using the RMA (Return Merchandise Authorization) procedure.

This option installs a factory-default image from the Check Point Cloud. If you had Hotfixes installed, you must re-install them.

Use this option if:

• You do not have a working snapshot image.
• The appliance that was returned had R75.40 Gaia or higher, and allowed data uploads to Check Point. See sk94509.

To restore a version from the Check Point Cloud:

1. In the First Time Configuration Wizard, select Automatic version recovery from the Check Point Cloud. Click Next.
2. Define the Connection to Check Point Cloud. Choose an interface to connect to the Internet, and configure connection parameters. Click Next.

   This shows the name of the last installed version.

3. Choose the version to restore. Click Finish.

If you did a System Configuration Backup on the earlier system and saved the backup to a remote location, you can restore the system with all settings and products.

Version Recovery by Importing a Snapshot Image

Use a snapshot file that was exported earlier, uploaded from your local computer or FTP server, to restore the:

• File system, with customized files.
• System configuration (For example, interfaces, routing, hostname).
• Software Blades.
• Management database (on a Security Management Server or a Multi-Domain Server).

You can import a snapshot that was made on a different release or on this release. You must import it to the same appliance or open server hardware model.

IMPORTANT:

• Before using Snapshot image management, see the known limitations.
• After importing the snapshot, you must activate the device license from the Portal or the User Center.
• For more about image management, see Gaia Snapshot Image Management.