Installing SmartConsole Clients

In This Section: Post-Installation Configuration Logging in to SmartConsole Troubleshooting SmartConsole

The SmartConsole and other SmartConsole applications are the GUI clients to manage the Security Management Server and Security Gateways.

For SmartConsole requirements, see the Release Notes.

To install the SmartConsole clients on Windows platforms:

1. Insert the R80 distribution media or download the SmartConsole application from the Support Center.
2. Run the SmartConsole executable.
3. Continue with the instructions on the screen.

Post-Installation Configuration

You can use the Check Point configuration tool (cpconfig for Security Management Server or mdsconfig for Multi-Domain Security Management) to configure settings after installation:

• Licenses and Contracts: Add or delete licenses for the Security Management Server and Security Gateways.
• Administrators: Define administrators with Security Management Server access permissions. These administrators must have Read/Write permissions to create the first security policy.
• GUI Clients: Define client computers that can connect to the Security Management Server using SmartConsole clients.

  Make sure that no firewall blocks port 19009 between the management server and SmartConsole clients.

• Certificate Authority: Starts the Internal Certificate Authority, which allows makes connections between the Security Management Server and Gateways. For Windows, you must define the name of the ICA host. You can use the default name or define your own. The ICA name must be in the host name.domain format, for example, ica.checkpoint.com.
• Fingerprint: Save the certificate fingerprint when you log in to SmartConsole clients for the first time.

Logging in to SmartConsole

To log in to SmartConsole clients:

1. Open the SmartConsole application.
2. Enter the host name or IP address of the Security Management Server or Multi-Domain Server.

   The management server authenticates the connection when you log in for the first time. Multiple administrators can be logged in at one time.

3. Enter your administrator credentials or select the certificate file.
4. Click Login.
5. If necessary, confirm the connection using the fingerprint generated during installation.

   You see this only the first time that you log in from a client computer.

Troubleshooting SmartConsole

If you disable control connections for implicit rules (Global Properties > FireWall), you must open ports for SmartConsole to communicate with the Security Management Server.

Make sure the SmartConsole computer can access these ports on the server:

• 18190
• 18264