Working with SNMP Traps

You can configure and see SNMP traps for ClusterXLClosed Cluster of Check Point Security Gateways that work together in a redundant configuration. The ClusterXL both handles the traffic and performs State Synchronization. These Check Point Security Gateways are installed on Gaia OS: (1) ClusterXL supports up to 5 Cluster Members, (2) VRRP Cluster supports up to 2 Cluster Members, (3) VSX VSLS cluster supports up to 13 Cluster Members. Note: In ClusterXL Load Sharing mode, configuring more than 4 Cluster Members significantly decreases the cluster performance due to amount of Delta Sync traffic. High AvailabilityClosed A redundant cluster mode, where only one Cluster Member (Active member) processes all the traffic, while other Cluster Members (Standby members) are ready to be promoted to Active state if the current Active member fails. In the High Availability mode, the Cluster Virtual IP address (that represents the cluster on that network) is associated: (1) With physical MAC Address of Active member (2) With virtual MAC Address. Synonym: Active/Standby. Acronym: HA..

To configure an SNMP trap:

  1. Connect to the command line on the Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..

  2. Log in to the Expert mode.

  3. On a Multi-Domain ServerClosed Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS., go to the context of the applicable Domain Management Server:

    mdsenv <IP Address or Name of Domain Management Server>

  4. Run:

    threshold_config

    For more information, see the R80.40 CLI Reference Guide > Chapter Security Management Server Commands > Section threshold_config.

  5. From the Threshold Engine Configuration Options menu, select (9) Configure Thresholds.

  6. From the Threshold Categories menu, select (2) High Availability.

  7. Select the applicable traps.

  8. Select and configure these actions for the specified trap:

    • Enable/Disable Threshold

    • Set Severity

    • Set Repetitions

    • Configure Alert Destinations

  9. From the Threshold Engine Configuration Options menu, select (7) Configure alert destinations.

  10. Configure your alert destinations.

  11. From the Threshold Engine Configuration Options menu, select (3) Save policy.

    You can optionally save the policy to a file.

  12. In SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., install the Access Control Policy on this clusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. object.

Note - You can download the most recent Check Point MIB files from sk90470.