Configuring Provisioning Profiles

With SmartProvisioning Check Point Software Blade on a Management Server (the actual name is "Provisioning") that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: Large-Scale Management, SmartLSM, LSM., you can use a Provisioning Check Point Software Blade on a Management Server that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: SmartProvisioning, SmartLSM, Large-Scale Management, LSM. Profile to configure the same settings on similar devices. A Provisioning Profile can provision any or all of the network configurations. You can determine which settings are provisioned and which are set up locally.

After you created a Provisioning Profile, assign it to the applicable gateways. When each gateway device fetches its Provisioning Profile, the device's configuration is updated with the settings in the profile.

For example, you can create a Provisioning Profile for a number of gateways that are in one branch office. They are on the same LAN, therefore you can provision their DNS servers with central management (configure once, set on all). However, this office has multiple domains, so you do not want the Provisioning Profile to determine their domain. You set the Domain settings to local management.

Provisioning Profiles function similarly to SmartLSM Security Profiles. The main differences between Provisioning Profiles and SmartLSM Security Profiles are described in this table:

Category	Provisioning Profile	SmartLSM Security Profile
Provides	Central management of servers, network, and so on, of Check Point gateways	Installation of Security Policy Collection of rules that control network traffic and enforce organization guidelines for data protection and access to resources with packet inspection. for SmartLSM Security Gateways
Necessary for	No gateway	SmartLSM Security Gateways
Managed by	SmartProvisioning	SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.

Gateways that are provisioning-enabled have more management features, such as multiple automatic backups (see Security Gateway Actions on SmartLSM Security Gateways).