Provisioning Settings for Security Gateways Configured in SmartConsole

This section describes how to configure the ProvisioningClosed Check Point Software Blade on a Management Server that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: SmartProvisioning, SmartLSM, Large-Scale Management, LSM. settings that are common to all the Security Gateways that you created in SmartConsole.

Before you begin, make sure that your administrator user name has Write permissions for SmartLSM Gateway Database (see Defining SmartProvisioning Administrators).

From the Devices pane, double-click the Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. object.

The window opens and shows the General tab.

  1. Click the General tab.

  2. In the Provisioning section, select Enable Provisioning.

  3. Click Provisioning Profile.

  4. From the drop-down menu, select the required Provisioning Profile, or click New and create a new Provisioning Profile.

  5. Click OK.

  6. Click Publish from the top toolbar.

You can configure the interfaces of the individual Security Gateway, or view how they are managed with the assigned Provisioning Profile.

You can select to use SmartProvisioningClosed Check Point Software Blade on a Management Server (the actual name is "Provisioning") that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: Large-Scale Management, SmartLSM, LSM. to manage the interface settings, or configure them locally on the Security Gateway.

  1. Click the Interfaces tab.

  2. Click Use the following settings.

  3. Click Add and select the applicable interface type.

  4. Configure the interface settings.

  5. Click OK to close the interface properties.

  6. Click OK to close the Security Gateway object properties.

  7. Click Publish from the top toolbar.

  1. Click the Interfaces tab.

  2. Click Manage settings locally on the device.

  3. Click OK.

  4. Click Publish from the top toolbar.

You can configure the routing settings of individual Security Gateways in the Devices pane in SmartProvisioning. You cannot configure these settings in a Provisioning Profile. You must configure the interfaces before the routes, because there are different types of routing configurations for different interfaces.

You can also configure the routing settings on the local appliance or server.

  1. Click the Routing tab.

  2. Click Use the following settings.

  3. Click Add.

  4. Select a route type:

    A different Routing window opens for each type.

  5. Enter the data.

    Click OK.

    Some of the options are different for different appliances.

  6. Click OK.

  7. Click Publish from the top toolbar.

  1. Click the Routing tab.

  2. Click Manage settings locally on the device.

  3. Click OK.

  4. Click Publish from the top toolbar.

Configure these settings for the internal network routes:

Configure these settings for host routes:

  • Destination IP Address - IP address of the destination host.

  • Interface - Select a pre-configured interface for this route.

  • Gateway - IP address of the gateway providing access to this host.

  • Metric - Distance in hops to the destination. If the host is on your local site, this must be a very low number. If the host is not behind routers, the metric must be zero.

Configure these settings for default routes to external destinations:

  • Gateway - IP address of the gateway providing access to the default external route.

  • Metric - Distance in hops to the gateway (this value must be as accurate as possible: too low a value can cause lost communications with looping; too high a value may cause security issues). You can define only one default route per gateway.

You can configure the DNS servers of the individual Security Gateway, or view how they are managed with the assigned Provisioning Profile.

You can select to use SmartProvisioning to manage the DNS settings, or configure on the local appliance or server.

  1. Click the DNS tab.

  2. Click Use the following settings.

  3. Enter the IP addresses of the First, Second, and Third DNS servers.

  4. Click OK.

  5. Click Publish from the top toolbar.

  1. Click the DNS tab.

  2. Click Manage settings locally on the device.

  3. Click OK.

  4. Click Publish from the top toolbar.

You can set up the host list of the individual Security Gateway, or view how it is managed centrally with the assigned Provisioning Profile.

You can use SmartProvisioning to manage the host list, or configure it on the local appliance or server.

  1. Click the Hosts tab.

  2. Click Use the following settings.

  3. Click New.

  4. Provide the Hostname and IP address.

  5. Click OK.

  6. Click Publish from the top toolbar.

  1. Click the Hosts tab.

  2. Click Manage settings locally on the device.

  3. Click OK.

  4. Click Publish from the top toolbar.

You can set up the domain of the individual Security Gateway, or view how it is managed centrally with the assigned Provisioning Profile.

You can select to use SmartProvisioning to manage the domain settings, or configure on the local appliance or server.

  1. Click the Domain Name tab.

  2. Click Use the following settings.

  3. Enter the Domain name.

  4. Click OK.

  5. Click Publish from the top toolbar.

  1. Click the Domain Name tab.

  2. Click Manage settings locally on the device.

  3. Click OK.

  4. Click Publish from the top toolbar.

You can see or change the host name of the individual Security Gateway in SmartProvisioning. You cannot use a Provisioning Profile to change the host name.

You can select to use SmartProvisioning to manage the host name settings, or configure on the local appliance or server.

  1. Click the Host Name tab.

  2. Click Use the following settings.

  3. Enter the Hostname of the gateway.

  4. Click OK.

  5. Click Publish from the top toolbar.

  1. Click the Host Name tab.

  2. Click Manage settings locally on the device.

  3. Click OK.

  4. Click Publish from the top toolbar.