Running the First Time Configuration Wizard in Gaia Portal

To start the Gaia First Time Configuration Wizard:

Step

Instructions

Connect a computer to the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. computer.

You must connect to the interface you configured during the Gaia installation (for example, eth0).

On your connected computer, configure a static IPv4 address in the same subnet as the IPv4 address you configured during the Gaia installation.

On your connected computer, in a web browser, connect to the IPv4 address you configured during the Gaia installation:

https://<IP address of Gaia Management Interface>

Enter the default username and password: admin and admin.

Click Login.

The Check Point First Time Configuration Wizard opens.

Follow the instructions on the First Time Configuration Wizard windows.

See the applicable chapters below for installing specific Check Point products.

Below you can find the description of the First Time Configuration Wizard windows and their fields.

Deployment Options window

In this window, you select how to deploy Gaia Operating System.

Section	Options	Description
Setup	Continue with R81 configuration	Use this option to configure the installed Gaia and Check Point products.
Install	Install from Check Point Cloud Install from USB device	Use these options to install a Gaia version.
Recovery	Import existing snapshot	Use this option to import an existing Gaia snapshot.

Section

Options

Description

Setup

Continue with R81 configuration

Use this option to configure the installed Gaia and Check Point products.

Install

Install from Check Point Cloud

Install from USB device

Use these options to install a Gaia version.

Recovery

Import existing snapshot

Use this option to import an existing Gaia snapshot.

If in the Deployment Options window, you selected Install from Check Point Cloud, the First Time Configuration Wizard asks you to configure the connection to Check Point Cloud. These options appear (applies only to Check Point appliances that you configured as a Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.):

Install major version - This option let you choose and install major versions available on Check Point Cloud. The Gaia CPUSE Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself. performs the installation.
Pull appliance configuration - This option applies the initial deployment configuration that includes different OS version on the appliance. You must prepare the initial deployment configuration with the Zero Touch Cloud Service. For more information, see sk116375.

Management Connection window

In this window, you select and configure the main Gaia Management Interface (1) Interface on a Gaia Security Gateway or Cluster member, through which Management Server connects to the Security Gateway or Cluster member. (2) Interface on Gaia computer, through which users connect to Gaia Portal or CLI.. You connect to this IP address to open the Gaia Portal Web interface for the Check Point Gaia operating system. or CLI session.

Field

Description

Interface

By default, First Time Configuration Wizard selects the interface you configured during the Gaia installation (for example, eth0).

Note - After you complete the First Time Configuration Wizard and reboot, you can select another interface as the main Gaia Management Interface and configure its IP settings.

Configure IPv4

Select how the Gaia Management Interface gets its IPv4 address:

Manually - You configure the IPv4 settings in the next fields.
Off - None.

IPv4 address

Enter the applicable IPv4 address.

Subnet mask

Enter the applicable IPv4 subnet mask.

Default Gateway

Enter the IPv4 address of the applicable default gateway.

Configure IPv6

Select how the Gaia Management Interface gets its IPv6 address:

Manually - You configure the IPv6 settings in the next fields.
Off - None.

IPv6 Address

Enter the applicable IPv6 address.

Mask Length

Enter the applicable IPv6 mask length.

Default Gateway

Enter the IPv6 address of the applicable default gateway.

Internet Connection window

Optional: In this window, you configure the interface that connects the Gaia computer to the Internet.


Interface	Select the applicable interface on this computer.
Configure IPv4	Select how the applicable interface gets its IPv4 address: Manually - You configure the IPv4 settings in the next fields. Off - None.
IPv4 address	Enter the applicable IPv4 address.
Subnet mask	Enter the applicable IPv4 subnet mask.
Configure IPv6	Optional. Select how the applicable interface gets its IPv6 address: Manually - You configure the IPv6 settings in the next fields. Off - None.
IPv6 Address	Enter the applicable IPv6 address.
Subnet	Enter the applicable IPv6 subnet mask.

Device Information window

In this window, you configure the Host name, the DNS servers and the Proxy server on the Gaia computer.

Field	Description
Host Name	Enter the applicable distinct host name.
Domain Name	Optional: Enter the applicable domain name.
Primary DNS Server	Enter the applicable IPv4 address of the primary DNS server.
Secondary DNS Server	Optional: Enter the applicable IPv4 address of the secondary DNS server.
Tertiary DNS Server	Optional: Enter the applicable IPv4 address of the tertiary DNS server.
Use a Proxy server	Optional: Select this option to configure the applicable Proxy server.
Address	Enter the applicable IPv4 address or resolvable hostname of the Proxy server.
Port	Enter the port number for the Proxy server.

Date and Time Settings window

In this window, you configure the date and time settings on the Gaia computer.

Field	Description
Set the time manually	Select this option to configure the date and time settings manually.
Date	Select the correct date.
Time	Select the correct time.
Time Zone	Select the correct time zone.
Use Network Time Protocol (NTP)	Select this option to configure the date and time settings automatically with NTP.
Primary NTP server	Enter the applicable IPv4 address or resolvable hostname of the primary NTP server.
Version	Select the version of the NTP for the primary NTP server.
Secondary NTP server	Optional: Enter the applicable IPv4 address or resolvable hostname of the secondary NTP server.
Version	Select the version of the NTP for the secondary NTP server.
Time Zone	Select the correct time zone.

Installation Type window

In this window, you select which type of Check Point products you wish to install on the Gaia computer.

Field	Description
Security Gateway and/or Security Management	Select this option to install: A Single Security Gateway. A Cluster Member Security Gateway that is part of a cluster.. A Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., including Management High Availability. An Endpoint Security Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server.. An Endpoint Policy Server. CloudGuard Controller. A dedicated single Log Server Dedicated Check Point server that runs Check Point software to store and process logs.. A dedicated single SmartEvent Server. A Standalone Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server..
Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS.	Select this option to install: A Multi-Domain Server, including Management High Availability. A dedicated single Multi-Domain Log Server Dedicated Check Point server that runs Check Point software to store and process logs in a Multi-Domain Security Management environment. The Multi-Domain Log Server consists of Domain Log Servers that store and process logs from Security Gateways that are managed by the corresponding Domain Management Servers. Acronym: MDLS..

Field

Description

Security Gateway and/or Security Management

Select this option to install:

A Single Security Gateway.
A Cluster Member Security Gateway that is part of a cluster..
A Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., including Management High Availability.
An Endpoint Security Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..
An Endpoint Policy Server.
CloudGuard Controller.
A dedicated single Log Server Dedicated Check Point server that runs Check Point software to store and process logs..
A dedicated single SmartEvent Server.
A Standalone Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server..

Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS.

Select this option to install:

A Multi-Domain Server, including Management High Availability.
A dedicated single Multi-Domain Log Server Dedicated Check Point server that runs Check Point software to store and process logs in a Multi-Domain Security Management environment. The Multi-Domain Log Server consists of Domain Log Servers that store and process logs from Security Gateways that are managed by the corresponding Domain Management Servers. Acronym: MDLS..

Products window

In this window, you continue to select which type of Check Point products you wish to install on the Gaia computer.

If in the Installation Type window, you selected Security Gateway and/or Security Management, these options appear:

Field	Description
Security Gateway	Select this option to install: A single Security Gateway. A Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Member. A Standalone.
Security Management	Select this option to install: A Security Management Server, including Management High Availability. An Endpoint Security Management Server. An Endpoint Policy Server. CloudGuard Controller. A dedicated single Log Server. A dedicated single SmartEvent Server. A Standalone.
Unit is a part of a cluster	This option is available only if you selected Security Gateway. Select this option to install a cluster of dedicated Security Gateways, or a Full High Availability Cluster. Select the cluster type: ClusterXL - For a cluster of dedicated Security Gateways, or a Full High Availability Cluster. VRRP Cluster - For a VRRP Cluster on Gaia.
Define Security Management as	Select Primary to install: A Security Management Server. An Endpoint Security Management Server. An Endpoint Policy Server. CloudGuard Controller. Select Secondary to install: A Secondary Management Server in Management High Availability. Select Log Server / SmartEvent only to install: A dedicated single Log Server. A dedicated single SmartEvent Server.

If in the Installation Type window, you selected Multi-Domain Server, these options appear:

Field	Description
Primary Multi-Domain Server	Select this option to install a Primary Multi-Domain Server in Management High Availability.
Secondary Multi-Domain Server	Select this option to install a Secondary Multi-Domain Server in Management High Availability.
Multi-Domain Log Server	Select this option to install a dedicated single Multi-Domain Log Server.

Note - By default, the option Automatically download Blade Contracts, new software, and other important data is enabled. See sk111080.

Dynamically Assigned IP window

In this window, you select if this Security Gateway gets its IP address dynamically (DAIP gateway).

Field	Description
Yes	Select this option, if this Security Gateway gets its IP address dynamically (DAIP gateway).
No	Select this option, if you wish to configure this Security Gateway with a static IP address.

Secure Internal Communication (SIC) window

In this window, you configure a one-time Activation Key. You must enter this key later in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. when you create the corresponding object and initialize SIC Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server..

Field	Description
Activation Key	Enter one-time activation key (between 4 and 127 characters long).
Confirm Activation Key	Enter the same one-time activation key again.

Security Management Administrator window

In this window, you configure the main administrator for this Security Management Server.


Use Gaia administrator: admin	Select this option, if you wish to use the default Gaia administrator (`admin`).
Define a new administrator	Select this option, if you wish to configure an administrator username and password manually.

Security Management GUI Clients window

In this window, you configure which computers are allowed to connect with SmartConsole to this Security Management Server.

Field	Description
Any IP Address	Select this option to allow all computers to connect.
This machine	Select this option to allow only a specific computer to connect. By default, the First Time Configuration Wizard uses the IPv4 address of your computer. You can change it to another IP address.
Network	Select this option to allow an entire IPv4 subnet of computers to connect. Enter the applicable subnet IPv4 address and subnet mask.
Range of IPv4 addresses	Select this option to allow a specific range of IPv4 addresses to connect. Enter the applicable start and end IPv4 addresses.

Leading VIP Interfaces Configuration window

In this window, you select the main Leading VIP Interface on this Multi-Domain Server.

Field	Description
Select leading interface	Select the applicable interface.

Multi-Domain Server GUI Clients window

In this window, you configure which computers are allowed to connect with SmartConsole to this Multi-Domain Server.

Field	Description
Any host	Select this option to allow all computers to connect.
IP address	Select this option to allow only a specific computer to connect. By default, the First Time Configuration Wizard uses the IPv4 address of your computer. You can change it to another IP address.

Field

Description

Any host

Select this option to allow all computers to connect.

IP address

Select this option to allow only a specific computer to connect.

By default, the First Time Configuration Wizard uses the IPv4 address of your computer.

You can change it to another IP address.

First Time Configuration Wizard Summary window

In this window, you can see the installation options you selected.

The Improve product experience section:

By default, the option Send data to Check Point is enabled. For information about this option, see sk111080.
By default, the option Send crash data to Check Point that might contain personal data is disabled.

If you enable this option, Gaia operating system uploads the detected core dump files to Check Point Cloud.

R&D can analyze the crashes and issue fixes for them.

Notes:

At the end of the First Time Configuration Wizard, the Gaia computer reboots and the initialization process is performed in the background for several minutes.
If you installed the Gaia computer as a Security Management Server or Multi-Domain Server, only read-only access is possible with SmartConsole during this initialization time.

To make sure the configuration is finished:

Connect to the command line on the Gaia computer.
Log in to the Expert mode.

Check that the bottom section of the /var/log/ftw_install.log file contains one of these sentences:

installation succeeded
FTW: Complete

Run:

cat /var/log/ftw_install.log | egrep --color "installation succeeded|FTW: Complete"

Example outputs:

From a Security Gateway or Cluster Member:

[Expert@GW:0]# cat /var/log/ftw_install.log | egrep --color "installation succeeded|FTW: Complete"
Dec 06, 19 19:19:51 FTW: Complete
[Expert@GW:0]#

From a Security Management Server or a Standalone:

[Expert@SA:0]# cat /var/log/ftw_install.log | egrep --color "installation succeeded|FTW: Complete"
Dec 06, 2019 03:48:38 PM installation succeeded.
06/12/19 15:48:39 FTW: Complete
[Expert@SA:0]#

From a Multi-Domain Server:

[Expert@MDS:0]# cat /var/log/ftw_install.log | egrep --color "installation succeeded|FTW: Complete"
Dec 06, 2019 07:43:15 PM installation succeeded.
[Expert@MDS:0]#