Post-Installation Configuration

After the installation is complete, and you rebooted the Check Point computer:

  • Configure the applicable settings in the Check Point Configuration Tool.

  • Check the recommended and available software packages in CPUSE (see Installing Software Packages on Gaia).

The Check Point Configuration Tool lets you configure these settings:

Check Point computer

Commands

Available Configuration Options

Security Management Server,

Dedicated Log Server,

Dedicated SmartEvent Server

cpconfig

(1) Licenses and contracts

(2) Administrator

(3) GUI Clients

(4) SNMP Extension

(5) Random Pool

(6) Certificate Authority

(7) Certificate's Fingerprint

(8) Automatic start of Check Point Products

 

(9) Exit

Multi-Domain Server,

Multi-Domain Log Server

1. mdsenv

2. mdsconfig

(1) Leading VIP Interfaces

(2) Licenses

(3) Random Pool

(4) Groups

(5) Certificate's Fingerprint

(6) Administrators

(7) GUI clients

(8) Automatic Start of Multi-Domain Server

(9) P1Shell

(10) Start Multi-Domain Server Password

(11) IPv6 Support for Multi-Domain Server

(12) IPv6 Support for Existing Domain Management Servers

 

(13) Exit

Security Gateway,

Cluster Member

cpconfig

(1) Licenses and contracts

(2) SNMP Extension

(3) PKCS#11 Token

(4) Random Pool

(5) Secure Internal Communication

(6) Disable cluster membership for this gateway

(7) Enable Check Point Per Virtual System State

(8) Enable Check Point ClusterXL for Bridge Active/Standby

(9) Check Point CoreXL

(10) Automatic start of Check Point Products

 

(11) Exit

For more information, see the R80.40 Security Management Administration Guide.

Note - The options shown depend on the configuration and installed products.

Menu Option

Description

Licenses and contracts

Manages Check Point licenses and contracts on this server.

Administrator

Configures Check Point system administrators for this server.

GUI Clients

Configures the GUI clients that can use SmartConsole to connect to this server.

SNMP Extension

Obsolete. Do not use this option anymore.

To configure SNMP, see the R80.40 Gaia Administration Guide - Chapter System Management - Section SNMP.

Random Pool

Configures the RSA keys, to be used by Gaia Operating System.

Certificate Authority

Initializes the Internal Certificate Authority (ICA) and configures the Certificate Authority's (CA) Fully Qualified Domain Name (FQDN).

Certificate's Fingerprint

Shows the ICA's Fingerprint.

This fingerprint is a text string derived from the server's ICA certificate.

This fingerprint verifies the identity of the server when you connect to it with SmartConsole.

Automatic start of Check Point Products

Shows and controls which of the installed Check Point products start automatically during boot.

Exit

Exits from the Check Point Configuration Tool.

For more information, see the R80.40 Multi-Domain Security Management Administration Guide.

Menu Option

Description

Leading VIP Interfaces

The Leading VIP Interfaces are real interfaces connected to an external network.

These interfaces are used when you configure virtual IP addresses for Domain Management Servers.

Licenses

Manages Check Point licenses and contracts on this server.

Random Pool

Configures the RSA keys, to be used by Gaia Operating System.

Groups

Usually, the Multi-Domain Server is given group permission for access and execution.

You may now name such a group or instruct the installation procedure to give no group permissions to the server.

In the latter case, only the Super-User is able to access and execute commands on the server.

Certificate's Fingerprint

Shows the ICA's Fingerprint.

This fingerprint is a text string derived from the server's ICA certificate.

This fingerprint verifies the identity of the server when you connect to it with SmartConsole.

Administrators

Configures Check Point system administrators for this server.

GUI Clients

Configures the GUI clients that can use SmartConsole to connect to this server.

Automatic Start of Multi-Domain Server

Shows and controls if Multi-Domain Server starts automatically during boot.

P1Shell

Obsolete. Do not use this option anymore.

Important - This option and the p1shell command are not supported (Known Limitation PMTR-45085).

Start Multi-Domain Server Password

Configures a password to control the start of the Multi-Domain Server.

IPv6 Support for Multi-Domain Server

Enables or disables the IPv6 Support on the Multi-Domain Server.

Important - R80.40 Multi-Domain Server does not support IPv6 address configuration (Known Limitation PMTR-14989).

IPv6 Support for Existing Domain Management Servers

Enables or disables the IPv6 Support on the Domain Management Servers.

Important - R80.40 Multi-Domain Server does not support IPv6 address configuration (Known Limitation PMTR-14989).

Exit

Exits from the Multi-Domain Server Configuration Program.

Note - The options shown depend on the configuration and installed products.

Menu Option

Description

Licenses and contracts

Manages Check Point licenses and contracts on this Security Gateway or Cluster Member.

SNMP Extension

Obsolete. Do not use this option anymore.

To configure SNMP, see the R80.40 Gaia Administration Guide - Chapter System Management - Section SNMP.

PKCS#11 Token

Register a cryptographic token, for use by Gaia Operating System.

See details of the token, and test its functionality.

Random Pool

Configures the RSA keys, to be used by Gaia Operating System.

Secure Internal Communication

Manages SIC on the Security Gateway or Cluster Member.

This change requires a restart of Check Point services on the Security Gateway or Cluster Member.

For more information, see:

Enable cluster membership for this gateway

Enables the cluster membership on the Security Gateway.

This change requires a reboot of the Security Gateway.

For more information, see the R80.40 ClusterXL Administration Guide.

Disable cluster membership for this gateway

Disables the cluster membership on the Security Gateway.

This change requires a reboot of the Security Gateway.

For more information, see the R80.40 ClusterXL Administration Guide.

Enable Check Point Per Virtual System State

Enables Virtual System Load Sharing on the VSX Cluster Member.

For more information, see the R80.40 VSX Administration Guide.

Disable Check Point Per Virtual System State

Disables Virtual System Load Sharing on the VSX Cluster Member.

For more information, see the R80.40 VSX Administration Guide.

Enable Check Point ClusterXL for Bridge Active/Standby

Enables Check Point ClusterXL for Bridge mode.

This change requires a reboot of the Cluster Member.

For more information, see the R80.40 ClusterXL Administration Guide.

Disable Check Point ClusterXL for Bridge Active/Standby

Disables Check Point ClusterXL for Bridge mode.

This change requires a reboot of the Cluster Member.

For more information, see the R80.40 ClusterXL Administration Guide.

Check Point CoreXL

Manages CoreXL on the Security Gateway or Cluster Member.

After all changes in CoreXL configuration, you must reboot the Security Gateway or Cluster Member.

For more information, see the R80.40 Performance Tuning Administration Guide.

Automatic start of Check Point Products

Shows and controls which of the installed Check Point products start automatically during boot.

Exit

Exits from the Check Point Configuration Tool.