Configuration and Upgrade Scenarios

This chapter contains workflows for common configuration and upgrade scenarios.

Configuring Cloud Services

Introduction

Cloud Services lets you connect your Quantum Spark.Appliance to a Cloud Services Provider that uses a Web-based application to manage, configure, and monitor the appliance.

Prerequisites

Before you connect to Cloud Services, make sure you have:

  • Received an email from your Cloud Services Provider that contains an activation link. When you click the link , your Check Point Appliance automatically connects to Cloud Services.

    Or

  • The Service Center IP address, the Quantum Spark Appliance gateway ID, and the registration key. Use these details to connect manually your Quantum Spark Appliance to Cloud Services.

To automatically connect to Cloud Services:

  1. Make sure the Quantum Spark Appliance was configured with the First Time Configuration Wizard. See the relevant Getting Started Guide.

  2. In the email that the Security Gateway owner gets from the Cloud Services Provider, click the activation link.

    After you log in, a window opens and shows the activation details sent in the email.

  3. Make sure the details are correct and click Connect.

    For more details, see Configuring Cloud Services.

To connect manually to Cloud Services:

  1. In the WebUI, go to the Home > Cloud Services page.

  2. Follow the Connect to Cloud Services procedure in Configuring Cloud Services.

Configuring a Guest Network

In some situations, you need to allow guest access to the Internet from within your organization. At the same time, you may want to restrict access to internal network resources. When you configure a guest network with a Hotspot, you can control network access. If you set user authentication options, you can then monitor the users that connect to the network.

Prerequisites

  • You must have a wireless network enabled on your appliance. The guest network is actually a Virtual Access Point (VAP).

  • You must define the network interfaces that redirect users to the Hotspot portal when they browse from those interfaces.

Configuration

  1. Go to Device > Wireless Network.

  2. Click Guest and follow the wizard instructions. See Configuring Wireless Network.

    • Set the network protection (unprotected or protected network).

    • Set the access and log policy options in the Access Policy tab.

  3. Make sure that the Use Hotspot checkbox is selected in the wizard.

  4. Make sure you defined the network interfaces for Hotspot. See Configuring the Local Network.

  5. Configure the Hotspot - Go to Device > Hotspot and set the options. See Configuring a Hotspot.

  6. If necessary, you can limit access to the Hotspot for specified user groups in the Access section.

Monitoring

Connect to the network and open a browser session. You see the customized Hotspot portal.

Note - You are shown the Hotspot portal one time in the given timeout period. The default timeout period is 4 hours.

User activity on this network is logged with user names if the Log traffic option was selected.