Installing a Multi-Domain Security Management

In This Section: Installing a Multi-Domain Server on Smart-1 Appliances Installing a Multi-Domain Server on Open Servers Installing a Multi-Domain Log Server

Installing a Multi-Domain Server on Smart-1 Appliances

Install a Multi-Domain Server on supported Smart-1 models. See the R80.10 Release Notes.

To reset a Smart-1 appliance to factory defaults:

The Gaia operating system comes pre-installed on your appliance.

1. Connect with a Serial or console connection to your appliance.
2. Power on the appliance.
3. When prompted, press any key to enter the boot menu.
4. Select Reset to factory defaults - Multi-Domain Server and press Enter.
5. Type yes and press Enter.

   The Multi-Domain Server is installed on the appliance and then the appliance resets.

To start the Gaia First Time Configuration Wizard:

1. Connect a standard network cable to the appliance's MGMT interface and to your management network.
2. In your web browser, connect to the default management IP address:

   https://192.168.1.1

3. Log in to the system using the default login name/password: admin and admin.

   Note - You can use the Gaia Portal menu to configure the appliance settings. In your web browser, connect to the https://<appliance_ip_address>:4434

4. Set the username and password for the administrator account.
5. Click Save and Login.

   The First Time Configuration Wizard opens.

To configure a Multi-Domain Server on Smart-1 appliances:

1. Configure these options in the Gaia Portal on the Image Management page.

   In the Deployment Options page, select Continue with Gaia configuration.

   Other options are:

   Clean install

   • Install a version from the Check Point Cloud.
   • Install from a USB device.

   Recovery

   • Automatic version recovery from the Check Point Cloud.
   • Import an existing snapshot.
2. Click Next.
3. In the Authentication Details page, change the default administrator password.

   Click Next.

4. In the Management Connection page, set an IPv4 and an IPv6 address for the management interface, or set one IP address (IPv4).

   You can change the Management IP address. Gaia automatically creates a secondary interface to keep connectivity when the management interface is not available. After you complete the First Time Configuration Wizard, you can remove this interface in the Interface Management > Network Interfaces page.

5. Optional: In the Connection to User Center page, configure an external interface to connect to the Check Point User Center. Use this connection to download a license and activate it. Alternatively, use the trial license. To connect to the User Center, you must also configure DNS and (if applicable) a Proxy Server, in the Device Information page of the First Time Configuration Wizard.
6. In the Device Information page, set the Host Name for the appliance.

   Optional:

   • Set the domain name, and IPv4 or IPv6 addresses for the DNS servers.
   • To connect to the User Center, set the IP Address and Port for a Proxy Server. Do this if you want to activate the appliance by downloading a license from the User Center.

   Click Next.

7. In the Date and Time Settings page, set the date and time manually, or enter the hostname, IPv4 address or IPv6 address of the NTP server.

   Click Next.

8. In the Products page, select Multi-Domain Server and Primary.

   For R77.10 and higher: Automatically download Blade Contracts and other important data. Check Point highly recommends that you select Automatic Downloads.

9. In the Security Management Administrator page, define the name and password of a Superuser administrator that can connect to the Multi-Domain Server using SmartConsole clients.

   Click Next.

10. In the Multi-Domain Server GUI Clients page, define IP addresses from which SmartConsole clients can log in to the Multi-Domain Server.
    • If you select This machine or Network, define an IPv4 or an IPv6 address.
    • You can also select a range of IPv4 addresses.

    Click Next.

11. In the Appliance Activation page, get a license automatically from the User Center and activate it, or use the 15 day trial license.

    Click Next.

12. In the Summary page, review your choices. Click Finish.

    Optional: Improve product experience by Sending Data to Check Point.

13. To start the configuration, click Yes > OK.

    A progress bar tracks the configuration of each task.

14. Download SmartConsole from the Gaia Portal.
    1. In your web browser, connect to the Gaia Portal:

       https://<management_ip_address>

    2. In the Overview page, click Download Now!

To configure a Secondary Multi-Domain Server on Smart-1 appliances:

Use the same procedure as for the primary Multi-Domain Server with these changes:

• Use a different IP address for the management interface on the secondary appliance.
• Select Secondary Multi-Domain Server.
• Define the Secure Internal Communication (SIC) Activation Key that is used by the Multi-Domain Server object in SmartConsole and then click Next.

  This key is necessary to configure the appliances in SmartConsole.