Post-Installation Configuration

After the installation is complete, and you rebooted the Check Point computer:

The Check Point Configuration Tool lets you configure these settings:

Check Point computer

Commands

Available Configuration Options

Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server.,

Dedicated Log ServerClosed Dedicated Check Point server that runs Check Point software to store and process logs.,

Dedicated SmartEvent Server

cpconfig

(1) Licenses and contracts

(2) Administrator

(3) GUI Clients

(4) SNMP Extension

(5) Random Pool

(6) Certificate Authority

(7) Certificate's Fingerprint

(8) Automatic start of Check Point Products

 

(9) Exit

Multi-Domain ServerClosed Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS.,

Multi-Domain Log ServerClosed Dedicated Check Point server that runs Check Point software to store and process logs in a Multi-Domain Security Management environment. The Multi-Domain Log Server consists of Domain Log Servers that store and process logs from Security Gateways that are managed by the corresponding Domain Management Servers. Acronym: MDLS.

1. mdsenv

2. mdsconfig

(1) Leading VIP Interfaces

(2) Licenses

(3) Random Pool

(4) Groups

(5) Certificate's Fingerprint

(6) Administrators

(7) GUI clients

(8) Automatic Start of Multi-Domain Server

(9) P1Shell

(10) Start Multi-Domain Server Password

(11) IPv6 Support for Multi-Domain Server

(12) IPv6 Support for Existing Domain Management Servers

 

(13) Exit

Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.,

Cluster MemberClosed Security Gateway that is part of a cluster.

cpconfig

(1) Licenses and contracts

(2) SNMP Extension

(3) PKCS#11 Token

(4) Random Pool

(5) Secure Internal Communication

(6) Disable cluster membership for this gateway

(7) Enable Check Point Per Virtual System State

(8) Enable Check Point ClusterXL for Bridge Active/Standby

(9) Check Point CoreXL

(10) Automatic start of Check Point Products

 

(11) Exit

For more information, see the R81 Security Management Administration Guide.

Note - The options shown depend on the configuration and installed products.

Menu Option

Description

Licenses and contracts

Manages Check Point licenses and contracts on this server.

Administrator

Configures Check Point system administrators for this server.

GUI Clients

Configures the GUI clients that can use SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. to connect to this server.

SNMP Extension

Obsolete. Do not use this option anymore.

To configure SNMP, see the R81 Gaia Administration Guide - Chapter System Management - Section SNMP.

Random Pool

Configures the RSA keys, to be used by GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Operating System.

Certificate Authority

Initializes the Internal Certificate Authority (ICAClosed Internal Certificate Authority. A component on Check Point Management Server that issues certificates for authentication.) and configures the Certificate Authority's (CA) Fully Qualified Domain Name (FQDN).

Certificate's Fingerprint

Shows the ICA's Fingerprint.

This fingerprint is a text string derived from the server's ICA certificate.

This fingerprint verifies the identity of the server when you connect to it with SmartConsole.

Automatic start of Check Point Products

Shows and controls which of the installed Check Point products start automatically during boot.

Exit

Exits from the Check Point Configuration Tool.

For more information, see the R81 Multi-Domain Security Management Administration Guide.

Menu Option

Description

Leading VIP Interfaces

The Leading VIP Interfaces are real interfaces connected to an external network.

These interfaces are used when you configure virtual IP addresses for Domain Management Servers.

Licenses

Manages Check Point licenses and contracts on this server.

Random Pool

Configures the RSA keys, to be used by Gaia Operating System.

Groups

Usually, the Multi-Domain Server is given group permission for access and execution.

You may now name such a group or instruct the installation procedure to give no group permissions to the server.

In the latter case, only the Super-User is able to access and execute commands on the server.

Certificate's Fingerprint

Shows the ICA's Fingerprint.

This fingerprint is a text string derived from the server's ICA certificate.

This fingerprint verifies the identity of the server when you connect to it with SmartConsole.

Administrators

Configures Check Point system administrators for this server.

GUI Clients

Configures the GUI clients that can use SmartConsole to connect to this server.

Automatic Start of Multi-Domain Server

Shows and controls if Multi-Domain Server starts automatically during boot.

P1Shell

Obsolete. Do not use this option anymore.

Important - This option and the p1shell command are not supported (Known Limitation PMTR-45085).

Start Multi-Domain Server Password

Configures a password to control the start of the Multi-Domain Server.

IPv6 Support for Multi-Domain Server

Enables or disables the IPv6 Support on the Multi-Domain Server.

Important - R81 Multi-Domain Server does not support IPv6 address configuration (Known Limitation PMTR-14989).

IPv6 Support for Existing Domain Management Servers

Enables or disables the IPv6 Support on the Domain Management Servers.

Important - R81 Multi-Domain Server does not support IPv6 address configuration (Known Limitation PMTR-14989).

Exit

Exits from the Multi-Domain Server Configuration Program.

Note - The options shown depend on the configuration and installed products.

Menu Option

Description

Licenses and contracts

Manages Check Point licenses and contracts on this Security Gateway or ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Member.

SNMP Extension

Obsolete. Do not use this option anymore.

To configure SNMP, see the R81 Gaia Administration Guide - Chapter System Management - Section SNMP.

PKCS#11 Token

Register a cryptographic token, for use by Gaia Operating System.

See details of the token, and test its functionality.

Random Pool

Configures the RSA keys, to be used by Gaia Operating System.

Secure Internal Communication

Manages SICClosed Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. on the Security Gateway or Cluster Member.

This change requires a restart of Check Point services on the Security Gateway or Cluster Member.

For more information, see:

Enable cluster membership for this gateway

Enables the cluster membership on the Security Gateway.

This change requires a reboot of the Security Gateway.

For more information, see the R81 ClusterXL Administration Guide.

Disable cluster membership for this gateway

Disables the cluster membership on the Security Gateway.

This change requires a reboot of the Security Gateway.

For more information, see the R81 ClusterXL Administration Guide.

Enable Check Point Per Virtual System State

Enables Virtual System Load Sharing on the VSXClosed Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Cluster Member.

For more information, see the R81 VSX Administration Guide.

Disable Check Point Per Virtual System State

Disables Virtual System Load Sharing on the VSX Cluster Member.

For more information, see the R81 VSX Administration Guide.

Enable Check Point ClusterXL for Bridge Active/Standby

Enables Check Point ClusterXL for Bridge modeClosed Security Gateway or Virtual System that works as a Layer 2 bridge device for easy deployment in an existing topology..

This change requires a reboot of the Cluster Member.

For more information, see the R81 ClusterXL Administration Guide.

Disable Check Point ClusterXL for Bridge Active/Standby

Disables Check Point ClusterXL for Bridge mode.

This change requires a reboot of the Cluster Member.

For more information, see the R81 ClusterXL Administration Guide.

Check Point CoreXL

Manages CoreXLClosed Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. on the Security Gateway or Cluster Member.

After all changes in CoreXL configuration, you must reboot the Security Gateway or Cluster Member.

For more information, see the R81 Performance Tuning Administration Guide.

Automatic start of Check Point Products

Shows and controls which of the installed Check Point products start automatically during boot.

Exit

Exits from the Check Point Configuration Tool.