Disabling Communication from the Security Gateway to the HSM Server

You can disable communication from the Check Point Security Gateway / ClusterClosed Two or more Check Point Firewalls that work together in a redundant configuration - High Availability, or Load Sharing. Members / Scalable Platform Security GroupClosed A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Check Point Firewall. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. to an HSM Server. For example, when the HSM Server is under maintenance.

Important:

Step Instructions

1

Connect to the command line on the Security Gateway / each Cluster Member/ Security Group.

2

Log in to Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

3

Disable the HSM configuration:

set param path https_inspection.hsm.enabled param-value false

4

Save the configuration:

save config

5

Stop and start Check Point services:

cpstop

cpstart

Important - Traffic does not flow through until the services start.