Running the First Time Configuration Wizard in Gaia Portal

To start the Gaia First Time Configuration Wizard:

Step

Instructions

1

Connect a computer to the GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Management InterfaceClosed (1) Interface on a Gaia Security Gateway or Cluster member, through which Management Server connects to the Security Gateway or Cluster member. (2) Interface on Gaia computer, through which users connect to Gaia Portal or CLI. of the Security GroupClosed A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected..

You must connect to the interface you configured during the Gaia installation (for example, eth1-Mgmt1).

2

On your connected computer, configure a static IPv4 address in the same subnet as the IPv4 address you configured during the Gaia installation.

3

On your connected computer, in a web browser, connect to the IPv4 address you configured during the Gaia installation:

https://<IP address of Gaia Management Interface>

4

Enter the default username and password: admin and admin.

5

Click Login.

The Check Point First Time Configuration Wizard opens.

6

Follow the instructions on the First Time Configuration Wizard windows.

See the applicable chapters below for installing specific Check Point products.

Below you can find the description of the First Time Configuration Wizard windows and their fields.

In this window, you select and configure the main Gaia Management Interface. You connect to this IP address to open the Gaia PortalClosed Web interface for the Check Point Gaia operating system. or CLI session.

Field

Instructions

Interface

By default, First Time Configuration Wizard selects the interface you configured during the Gaia installation (for example, eth1-Mgmt1).

Note - After you complete the First Time Configuration Wizard and reboot, you can select another interface as the main Gaia Management Interface and configure its IP settings.

Configure IPv4

Select how the Gaia Management Interface gets its IPv4 address:

  • Manually - You configure the IPv4 settings in the next fields.

  • Off - None.

IPv4 address

Enter the applicable IPv4 address.

Subnet mask

Enter the applicable IPv4 subnet mask.

Default Gateway

Enter the IPv4 address of the applicable default gateway.

Configure IPv6

Select how the Gaia Management Interface gets its IPv6 address:

  • Manually - You configure the IPv6 settings in the next fields.

  • Off - None.

Note - R80.20SP does not support IPv6 Address on Gaia Management Interface (Known Limitation 01622840).

IPv6 Address

Enter the applicable IPv6 address.

Mask Length

Enter the applicable IPv6 mask length.

Default Gateway

Enter the IPv6 address of the applicable default gateway.

Optional: In this window, you configure the interface that connects the Security Group to the Internet.

Field

Instructions

Interface

Select the applicable interface on this computer.

Configure IPv4

Select how the applicable interface gets its IPv4 address:

  • Manually - You configure the IPv4 settings in the next fields.

  • Off - None.

IPv4 address

Enter the applicable IPv4 address.

Subnet mask

Enter the applicable IPv4 subnet mask.

Configure IPv6

Optional. Select how the applicable interface gets its IPv6 address:

  • Manually - You configure the IPv6 settings in the next fields.

  • Off - None.

IPv6 Address

Enter the applicable IPv6 address.

Subnet

Enter the applicable IPv6 subnet mask.

In this window, you configure the date and time settings on Gaia of the Security Group.

Field

Instructions

Set the time manually

Select this option to configure the date and time settings manually.

Date

Select the correct date.

Time

Select the correct time.

Time Zone

Select the correct time zone.

Use Network Time Protocol (NTP)

Select this option to configure the date and time settings automatically with NTP.

Primary NTP server

Enter the applicable IPv4 address or resolvable hostname of the primary NTP server.

Version

Select the version of the NTP for the primary NTP server.

Secondary NTP server

Optional: Enter the applicable IPv4 address or resolvable hostname of the secondary NTP server.

Version

Select the version of the NTP for the secondary NTP server.

Time Zone

Select the correct time zone.

Note - By default, the option Automatically download Blade Contracts, new software, and other important data is enabled. See sk111080.

In this window, you select if this Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. gets its IP address dynamically (DAIP gateway).

Field

Instructions

Yes

DHCP Server configuration is not supported:

  • R80.20SP does not support the option Obtain IPv4 address automatically (Known Limitation MBS-3246).

  • R80.20SP does not support the option Obtain IPv6 address automatically (Known Limitation MBS-3246).

No

Select this option, if you wish to configure this Security Gateway with a static IP address.

In this window, you configure a one-time Activation Key. You must enter this key later in SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. when you create the corresponding object and initialize SICClosed Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server..

Field

Instructions

Activation Key

Enter one-time activation key (between 4 and 127 characters long).

Confirm Activation Key

Enter the same one-time activation key again.

In this window, you can see the installation options you selected.

Notes:

  • By default, the option Send data to Check Point is enabled. For information about this option, see sk111080.

  • At the end of the First Time Configuration Wizard, the Security Group reboots and the initialization process is performed in the background for several minutes.

  • To make sure the configuration is finished:

    1. Connect to the command line on the Security Group.

    2. Log in to the Expert mode.

    3. Check that the bottom section of the /var/log/ftw_install.log file contains one of these sentences:

      • installation succeeded

      • FTW: Complete

      Run:

      cat /var/log/ftw_install.log | egrep --color "installation succeeded|FTW: Complete"

      Example output:

      [Expert@MyChassis-ch0x-0x:0]# g_cat /var/log/ftw_install.log | egrep --color "installation succeeded|FTW: Complete"
Dec 06, 19 19:19:51 FTW: Complete
[Expert@MyChassis-ch0x-0x:0]#