Centrally Managing Gaia Device Settings

Important - Scalable Platform Security Groups do not support Central Management of Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Device Settings (Known Limitation MBS-4754): Connect with SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. to the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server.. From the left navigation panel, click Gateways & Servers. Right-click on the Security Group object. The Scripts and Actions menus are not supported.

Introduction of Gaia Central Management

SmartConsole lets you:

• Centrally configure device settings for a Proxy server

• Do Backup and Restore operation

  A compressed .tgz backup file captures the Gaia OS configuration and the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. database.

• Do maintenance operations:

  • By opening the Gaia Portal Web interface for the Check Point Gaia operating system. or command shell from SmartConsole

  • By fetching settings from the device, or by pushing settings to the device

• Examine recent tasks:

  The Recent Tasks tab, located in the bottom section of SmartConsole, shows recent Gaia Security Gateway management tasks done using SmartConsole.

• Run command line scripts on the Security Gateway.

  Output from the commands shows in the Recent Tasks window.

  Double-click the task to see the complete output.

• Receive notification on local device configuration change

  The Status column in the Gateways view indicates changes in the device configuration

• Implement configuration changes without a full policy install (Push Settings to Device action)

• Automate the configuration of Cloning Groups and synchronization between the members

Managing Gaia in SmartConsole

After enabling Central management, Gaia Security Gateways can be more effectively managed through SmartConsole.

Running Command Scripts

One Time scripts

You can manually enter and run a command-line script on the selected GaiaSecurity Gateways.

This feature is useful for scripts that you do not need to run on a regular basis.

Understanding One-Time Scripts

When you specify a script:

• By default, the maximum size of a script is 8 KB.

• The output from the script shows in the Tasks tab at the bottom of the Gateways & Servers view.

• The Run One Time Script window does not support interactive or continuous scripts. To run interactive or continuous scripts, open a command shell.

Note - SmartConsole limits the length of a script's output. For more, see sk181529.

Running a one-time script

Step	Instructions
1	Right-click the Security Gateway.
2	Select Scripts > Run One Time Script.
3	The Run One Time Script window opens. You can: Enter the command in the Script Body text box and specify script arguments, or Load the complete command from a text file Notes: By default, the maximum size of a script is 8 kilobytes. This value can be changed in SmartConsole > Main application menu > Global properties > Advanced > Configure > Central Device Management > device_settings_max_script_length_in_KB.
4	Click Run. The output from the script shows in the Tasks tab > Results column. Double-click the task to view the output in a larger window. You can also right-click the task and select View, then Copy to Clipboard Notes: The Run One Time Script window does not support interactive or continuous scripts. To run interactive or continuous scripts, open a command shell. If the Security Gateways are not part of a Cloning Group, you can run a script on multiple Security Gateways at the same time.

One Time Script Options

Script Body - Enter the script commands.

Load from File - Load a prepared script.

Comment - Enter a text comment (optional).

Run - Click to run the script that you entered.

Running script from the repository

You can run a predefined script from the script repository.

To run a script from the repository:

Step	Description
1	In the Gateways & Servers view, right-click the Security Gateways or Security Management Servers, on which you want to run scripts.
2	Select Scripts > Scripts Repository. The Scripts Repository window opens.
3	Do one of these steps: Select an existing script from the list, click Run, enter Arguments if needed, and click Run. Click New to create a new script for the repository, or load it from a text file. Click OK.

The output from the script shows in the Tasks tab at the bottom of the Gateways & Servers view.

Notes:

• The Scripts Repository window does not support interactive or continuous scripts. To run interactive or continuous scripts, open a command shell.

• You can run the script on multiple Security Gateways or Security Management Servers at the same time.

• For a cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. object, the script will run automatically on all cluster members.

• The ~ character is not supported in scripts for security reasons.

Managing Repository Scripts

You can create new scripts, edit or delete scripts from the script repository.

To manage scripts:

1. Right-click the Security Gateway.

2. Select Scripts > Manage Script Repository

3. The Script Repository window opens

Note: You can also run and manage scripts by clicking Scripts in the Gateways view.

Opening Gaia Portal and Gaia Clish

In SmartConsole, you can open a Security Gateway's the command line window, or the Gaia Portal. You can select the command line or the Gaia Portal from the right-click menu of a Security Gateway object, or from the top toolbar > Actions button.