cpconfig

Description

This command starts the Check Point Configuration Tool.

This tool lets you configure specific settings for the installed Check Point products.

Important - You must run this command on a Security GroupClosed A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. - in Gaia gClishClosed The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group., or in the Expert mode.

Syntax

cpconfig

Menu Options

Note - The options shown depend on the configuration and installed products.

Menu Option

Description

Licenses and contracts

Manages Check Point licenses and contracts on this Security Group.

SNMP Extension

Obsolete. Do not use this option anymore.

To configure SNMP, see the R80.20SP Quantum Maestro Gaia Administration Guide > Chapter System Management > Section SNMP.

PKCS#11 Token

Register a cryptographic token, for use by GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Operating System.

See details of the token, and test its functionality.

Random Pool

Configures the RSA keys, to be used by Gaia Operating System.

Secure Internal Communication

Manages SICClosed Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. on the Security Group.

This change requires a restart of Check Point services on the Security Group.

For more information, see:

Enable cluster membership for this gateway

Enables the clusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. membership on the Security Group.

This change requires a reboot of the Security Group.

Disable cluster membership for this gateway

Disables the cluster membership on the Security Group.

This change requires a reboot of the Security Group.

Enable Check Point Per Virtual System State

Enables Virtual System Load Sharing on the Security Group in the VSXClosed Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode.

For more information, see the R80.20SP Quantum Maestro VSX Administration Guide.

Disable Check Point Per Virtual System State

Disables Virtual System Load Sharing on the Security Group in the VSX mode.

For more information, see the R80.20SP Quantum Maestro VSX Administration Guide.

Enable Check Point ClusterXL for Bridge Active/Standby

Enables Check Point ClusterXL for Bridge modeClosed Security Gateway or Virtual System that works as a Layer 2 bridge device for easy deployment in an existing topology..

This change requires a reboot of the Security Group.

Disable Check Point ClusterXL for Bridge Active/Standby

Disables Check Point ClusterXL for Bridge mode.

This change requires a reboot of the Security Group.

Check Point CoreXL

Manages CoreXLClosed Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. on the Security Group.

After all changes in CoreXL configuration, you must reboot the Security Group.

For more information, see CoreXL.

Automatic start of Check Point Products

Shows and controls which of the installed Check Point products start automatically during boot.

Exit

Exits from the Check Point Configuration Tool.

Example

[Expert@MyChassis-ch0x-0x:0]# cpconfig
This program will let you re-configure
your Check Point products configuration.
 
 
Configuration Options:
----------------------
(1) Licenses and contracts
(2) SNMP Extension
(3) PKCS#11 Token
(4) Random Pool
(5) Secure Internal Communication
(6) Disable cluster membership for this gateway
(7) Enable Check Point Per Virtual System State
(8) Enable Check Point ClusterXL for Bridge Active/Standby
(9) Check Point CoreXL
(10) Automatic start of Check Point Products
 
(11) Exit
 
Enter your choice (1-11) :