Installing One Security Management Server only, or Primary Security Management Server in Management High Availability

Workflow:

Install the Security Management Server.
Configure the Security Management Server object in SmartConsole.

Step 1 of 2: Install the Security Management Server

Step	Description
1	Install the Gaia Operating System: Installing the Gaia Operating System on a Check Point Appliance Installing the Gaia Operating System on an Open Server
2	Run the Gaia First Time Configuration Wizard.
3	During the First Time Configuration Wizard, you must configure these settings: In the Installation Type window, select Security Gateway and/or Security Management. In the Products window: In the Products section, select Security Management only. In the Clustering section, in the Define Security Management as field, select Primary. In the Security Management GUI Clients window, configure the applicable allowed computers: Any IP Address - Allows all computers to connect. This machine - Allows only the single specified computer to connect. Network - Allows all computers on the specified network to connect. Range of IPv4 addresses - Allows all computers in the specified range to connect.

Step

Description

Install the Gaia Operating System:

Run the Gaia First Time Configuration Wizard.

During the First Time Configuration Wizard, you must configure these settings:

In the Installation Type window, select Security Gateway and/or Security Management.
In the Products window:
1. In the Products section, select Security Management only.
2. In the Clustering section, in the Define Security Management as field, select Primary.
In the Security Management GUI Clients window, configure the applicable allowed computers:
- Any IP Address - Allows all computers to connect.
- This machine - Allows only the single specified computer to connect.
- Network - Allows all computers on the specified network to connect.
- Range of IPv4 addresses - Allows all computers in the specified range to connect.

Step 2 of 2: Perform initial configuration in SmartConsole

Step	Description
1	Connect with SmartConsole to the Security Management Server.
2	From the left navigation panel, click Gateways & Servers.
3	Open the Security Management Server object.
4	On the General Properties page, click the Management tab.
5	Enable the desired Software Blades. Note - The SmartEvent Software Blade is not supported in Management High Availability environment (sk25164).
6	Click OK.

Disk space for logs and indexes:

The Security Management Server with Log Indexing enabled, creates and uses index files for fast access to log file content. Index files are located by default at $RTDIR/log_indexes/.

To make sure that there is always sufficient disk space on the Security Management Server, the server that stores the log index deletes the oldest index entries, when the available disk space is less than a specified minimum. The default minimum value is 5000 MB, or 15% of the available disk space.

To configure the desired minimum disk space:

Step	Description
1	In the SmartConsole, edit the object of the Security Management Server.
2	From the left navigation tree, click Logs > Storage.
3	Select When disk space is below <number> Mbytes, start deleting old files.
4	Enter the desired disk space value.
5	Click OK.

For more information:

See the R80.20 Security Management Administration Guide.