Contents

Copyright Notice  Important Information  Maestro Next Generation Security Gateway Guide  Terms  Check Point Next Generation Security Gateway Solution  Mirror and Decrypt  ICAP Client  Hardware Security Module (HSM)     Why Use an HSM?     The Check Point Environment with Gemalto SafeNet HSM Appliance     Workflow for Setting Up Your HSM Environment     Step 1: Extracting the Gemalto Help Package     Step 2: Configuring the Gemalto HSM Appliance Server to Work with Check Point Gateway     Step 3: Configuring the Gemalto HSM Client Workstation     Step 4: Creating the CA Certificate on the Gemalto HSM Appliance Server     Step 5: Configuring the Check Point Security Group to Work with the Gemalto HSM Appliance Server     Additional Actions for a Gemalto HSM Appliance Server        Disabling Communication from the Check Point Gateway to the Gemalto HSM Appliance Server        Deleting a Trust Link with the HSM Appliance Server        Configuring a Second Interface on a Gemalto HSM Appliance for NTLS        SmartConsole logs        SNMP        cpstat https_inspection  Creating an Access Control Policy  Creating a Threat Prevention Policy  Creating Shared Policies  Adding Users to the Policy  Logging and Monitoring  Maximizing Network Performance and Redundancy  Simplifying Security for Private Clouds  Securing Data  IPv6 Neighbor Discovery  Managing Ethernet Protocols  Deploying a Security Gateway in Monitor Mode  Configuring Link State Propagation (LSP) on Security Groups  Troubleshooting Specific Problems  Command Line Reference  Working with Kernel Parameters on Security Group Members  Kernel Debug on Security Group Members