Installing a Standalone
In a Standalone Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server. deployment, a Check Point computer runs both the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. and Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. products.
|
Important:
|
See the R81.10 Release Notes for the requirements for a Standalone deployment.
These methods are available to configure a Standalone deployment:
This method is supported on Check Point appliances (that support a Standalone deployment), Open Servers, and Virtual Machines that meet the requirements listed in the R81.10 Release Notes.
-
Install the Standalone
Step
Instructions
1
Install the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Operating System:
2
3
During the First Time Configuration Wizard, you must configure these settings:
-
In the Installation Type window, select Security Gateway and/or Security Management.
-
In the Products window:
-
In the Products section, select both Security Gateway and Security Management.
-
In the Clustering section:
-
Clear Unit is a part of a cluster, type.
-
In the Define Security Management as field, select Primary.
-
-
-
In the Security Management Administrator window, select one of these options:
-
Use Gaia administrator
-
Define a new administrator and configure it
-
-
In the Security Management GUI Clients window, configure the applicable allowed computers:
-
Any IP Address - Allows all computers to connect
-
This machine - Allows only the single specified computer to connect
-
Network - Allows all computers on the specified network to connect
-
Range of IPv4 addresses - Allows all computers in the specified range to connect
-
-
-
Configure the Standalone object in SmartConsole
Step
Instructions
1
Connect with SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. to the Standalone.
2
From the left navigation panel, click Gateways & Servers.
3
Open the Standalone object.
Check Point Gateway properties window opens on the General Properties page.
4
In the Platform section, select the correct options:
-
In the Hardware field:
-
If you install the Security Gateway on a Check Point Appliance, select the correct appliances series.
-
If you install the Security Gateway on an Open Server Physical computer manufactured and distributed by a company, other than Check Point., select Open server.
-
-
Make sure the Version field shows R81.10.
-
In the OS field, select Gaia.
5
Enable the applicable Software Blades:
-
On the Network Security tab.
-
On the Threat Prevention tab.
6
On the Management tab, enable the applicable Software Blades.
7
Click OK.
8
Publish the SmartConsole session.
-
-
Configure the applicable Access Control policy for the Standalone in SmartConsole
Step
Instructions
1
Connect with SmartConsole to the Standalone.
2
From the left navigation panel, click Security Policies.
3
Create a new policy and configure the applicable layers:
-
At the top, click the + tab (or press CTRL T).
-
On the Manage Policies tab, click Manage policies and layers.
-
In the Manage policies and layers window, create a new policy and configure the applicable layers.
-
Click Close.
-
On the Manage Policies tab, click the new policy you created.
4
Create the applicable Access Control rules.
5
Install the Access Control Policy on the Standalone object.
-
This method is supported only on Check Point appliances that support a Standalone deployment.
This method installs a Standalone on a Check Point appliance in Bridge Mode.
For more information on Gaia Quick Standalone Setup on Check Point appliances, see sk102231.
For more information, see the:
-
Applicable Administration Guides on the R81.10 Home Page.