Demo Steps

If you do not have an Infinity account, open one and register for the Smart-1 Cloud application.

Step

Instructions

1

Navigate to Create Account

2

Enter your company's name (e.g : Smart-1-cloud-demo-<FirstName>-<LastName>-<CompanyName>), email address, phone number, and country.

3

Select storage location.

4

Select Industry and Business Size.

5

Select the account type (Customer is the default type). It is possible to change the account type after the account is created.

6

Select these checkboxes:

7

Follow the activation instructions in the email sent to your account.

To go back to the sign-in page, click Back to sign in and sign in.

Step

Instructions

1

Login to Infinity Portal and make sure to select the new account.

2

On the Infinity Portal home page, click the Menu button in the top left corner.

3

From the drop-down list, select Security Management & Smart-1 Cloud.

4

Click Start free trail.

5

Click Start a demo.

Note - Demo type is for demonstrations only, cannot be used in production.

The environment will be terminated after 24 hours with no option to extend.

6

The Creating your Smart-1 Cloud Environment window opens.

It takes 1-2 minutes to create a new service. After the process is complete, an email is sent to your account.

Step

Instructions

1

From the left navigation panel, click Infinity Services.

2

In the bottom left section Data Sharing, on the right of Configuration Sharing, click Edit.

3

The Configuration Sharing window opens.

4

Near the Enable option, click the OFF button.

It must change to ON.

Click OK.

5

The configuration sharing starts, and after some time its status changes from Initializing to Active.

Step

Instructions

1

From the left navigation panel, click Connect Gateways.

2

Click the large plus icon.

The Register a New Security Gateway window opens.

3

In the Gateway Name field, enter the name for this object , e.g. : SGW

4

Click Register.

This creates a new Security Gateway object in the Service with the name that you entered.

5

Click Connect Gateway and follow the instructions to complete the connection.

6

Connect to Jump-Server VM and open MobaXterm application on the desktop.

7

Connect to the saved session: Quantum Security Gateway.

8

Run the following command on the SSH session:

clish

9

From the Connect Gateway instructions,

Copy and run the command on the SSH session of the Quantum Security Gateway :

Note - You can paste it in the SSH session using the following options:

  1. Use the right mouse button.

  2. VM Clipboard from the Viewer's Settings:

    1. Copy the text from your local computer using any supported method, such as the Ctrl-C keyboard shortcut or a Copy menu option.

    2. From the Viewer's Settings menu at the left, click Keyboard > VM Clipboard. The VM Clipboard popup will be displayed.

    3. Paste text into the text popup using either the context menu or the Ctrl-V keyboard shortcut (Cmd-V on a Mac).

    4. Click Save. The remote VM's clipboard is now updated with the text you pasted into the text popup.

      You can now paste the text into any application on the remote VM using a paste function supported by the application for pasting.

10

When the process is finished, the status in the portal shows: Pending Trust (SIC)....

11

Log in to Streamed SmartConsole:

  1. In the Smart-1 Cloud application page.

  2. Navigate to Settings > API & SmartConsole.

  3. Click Open Streamed SmartConsole.

12

In SmartConsole open the Gateway Object.

Double click the Gateway name (SGW) in Gateways and Servers view.

13

Click on the 'Communication...' button in order to initiate the Secure Internal Communication (SIC) to the Security Gateway:

14

Enter the following password :

Cpwins1!

15

Click Initialize.

16

Click OK.

17

Click Close on the Get Topology Results window.

18

Click on Network Management > eth0 > Edit.

19

Click Modify.

20

On Security Zone , Select the option : According to topology: InternalZone.

21

Click OK x 3 to close the Gateway window.

22

Click on Security Polices .

23

Change the source on Rule # 1 (Access to gateway) to Any and add https service.

24

Change the log type on Rule # 4.3 to Extended Log.

25

Click Publish.

26

Click Install Policy and wait for the policy installation success messages.

Step

Instructions

1

In Infinity Portal, in the top left corner, click the Menu button.

2

From the drop-down list, in the section Quantum, click SD-WAN.

3

Click Start free trail.

4

In the middle section, click Profiles.

5

Click Quantum Profile to open it.

Note - The SD-WAN Application creates this Quantum Profile automatically in these cases:

  • You connect your on-premises Management Server to Infinity Portal and configure Object Sharing.

  • You enable the Smart-1 Cloud Application and configure Object Sharing.

6

Follow the instructions in the Download & Deployment section to install the Agent on the Security Gateway:

  1. Copy the Command.

  2. Connect to Jump-Server VM and open MobaXterm application on the desktop.

  3. Connect to the saved session: Quantum Security Gateway.

  4. Make sure that you are in Expert mode (if you are in clish , type exit to return to expert).

  5. Paste the command and Click Enter,

    Wait for the message "Check Point Nano Agent successfully installed"

    Note - You can paste it in the SSH session using the following options:

    1. Use the right mouse button.

    2. VM Clipboard from the Viewer's Settings:

      1. Copy the text from your local computer using any supported method, such as the Ctrl-C keyboard shortcut or a Copy menu option.

      2. From the Viewer's Settings menu at the left, click Keyboard > VM Clipboard. The VM Clipboard popup will be displayed.

      3. Paste text into the text popup using either the context menu or the Ctrl-V keyboard shortcut (Cmd-V on a Mac).

      4. Click Save. The remote VM's clipboard is now updated with the text you pasted into the text popup.

        You can now paste the text into any application on the remote VM using a paste function supported by the application for pasting.

  6. In Infinity Portal  > SD-WAN > Network > Agents.

    You will be able to review the connected Security Gateway.

Step

Instructions

1

In Infinity portal > SD-WAN application,

From the left navigation panel, click Network.

2

In the middle panel, click Getting Started.

3

In the Configure SD-WAN section, click Open Wizard.

4

In Step (1) Environment, click Next.

5

In Step (2) Uses Cases:

  1. Select the option : "Use only Internet use cases, but no overlay use cases"

  2. Click Next.

6

In Step (3) Quantum Gateways:

  1. Select the connected Security Gateways.

  2. Click Next.

7

In Step (4) WAN Link Mapping:

  1. Map to the following interfaces:

    • WAN 1 : eth1

    • WAN 2 : eth2

  2. Click Next.

8

In Step (5) Summary:

  1. Select the option : "Publish and Enforce the policy now".

  2. Click Done

Note - it will take several minutes until you will be able to see data on the Monitor Dashboard.

The events in the below screenshots are only an example and may vary from your demo environment.

Step

Instructions

1

From the left navigation panel, click on Monitor > Dashboard

.

2

In the top left corner, Select the time range of Last Hour :

3

Review the following widgets:

  • OVERALL SLA:

  • TOP APPLICATIONS BY TRAFFIC:

4

Click on the 'Live Monitoring' tab and select the following :

  • Gateway : SGW

  • Steering Behavior : Default Breakout

  • Time Filter : Last 5 Minutes

5

In Events view you will be able to review the steering events.

6

In Logs view you will be able to review the traffic logs.

7

You can filter the logs per Steering Object or Outgoing ISP.

Step

Instructions

1

On The Network view,

Click on SD-WAN Policy to review the pre-configured rules for steering the traffic.

Note - With Check Point Quantum SD-WAN you are able to build your steering policies with more than 10,000 applications and services.

2

From the top toolbar, Click WAN Link Mapping to review the configured mapping on the SD-WAN gateway.

The WAN Link Mapping section shows this table for our SD-WAN demo Gateway :

3

Return to the SD-WAN Policy view and review the pre-configured rules and behaviors.

The active component making the steering decisions in our SD-WAN policy is the Steering Behavior object.

Each rule may apply a different Steering Behavior object, based on the different needs

4

Click on Manage Objects to review the pre-configured Steering Behaviors:

5

Review the Steering Candidates options of Web Conferencing Steering Object:.

Note - The Security Gateway sends the traffic through the WAN Links configured in the Steering Behavior, if the Access Control Policy allows this traffic.

6

Click on Criteria to review the criteria Thresholds settings:

Security Gateway uses only WAN Links that have characteristics below the configured maximums.

  • The maximum Latency (in milliseconds).

  • The maximum Jitter (in milliseconds).

  • The maximum Packet Loss (in percent).

If all ISP Links perform beyond the threshold, the SD-WAN Policy selects the first ISP in the alphabetical order of its name.

7

Click the WAN Link Utilization heading to expand this section and review the applicable settings:

  • Link Aggregation - To use all available WAN Links (in parallel) that meet the values you configured in the Thresholds section.

  • Prioritize - To use specific WAN Links (available only if in the Steering Candidates section, you selected Specific WAN Links).

8

Click the Quality Check Methodology heading to expand this section and configure the applicable settings.

These settings determine how the Security Gateway measures the ISP link quality.

  • Best Practice - To use ping to a Google DNS Server (8.8.8.8).

  • Specific destination - To use ping to a specific IP address. Currently, only the ping option is available.

  • Check interval - Frequency that may be configured for testing the WAN Links by probing.

Step

Instructions

1

From the Jump-Server VM,

Connect to the Windows-Client VM via the RDP shortcut on the desktop.

2

Open Chrome Browser and click on the save bookmark : "Join a Test Meeting | Zoom".

3

Click Join.

4

Wait for the Zoom application to open.

You can close the audio windows in the Zoom application.

5

Return to Infinity portal in and navigate to SD-WAN > Monitor > Dashboard > Live Monitoring.

6

Select the Web Conferencing Steering Object and review the Gateway Details values.

7

Click on Logs to review the logs for Zoom application session (Filter for Zoom).

Note - You can also run speed tests from the Windows-Client VM and review the Live Monitoring in SD-WAN application in Infinity Portal.

The below instructions are for WAN1 link but you can also run the same for WAN2 (depends on the active link).

Step

Instructions

1

From the Jump-Server VM,

Open the MPManager application from the desktop shortcut.

2

Run the saved session 'Add Latency to WAN1..."

Note - The script will connect to the Quantum security gateway and will run tc utility and will simulate delay of 200ms on eth1 interface (WAN1).

3

The session will run the following:

4

Return to Infinity portal > SD-WAN > Monitor > Dashboard > Live Monitoring.

5

Select the Default Breakout.

6

Review the Link Swap Event & Latency Graph.

7

Return to the MPManager application on the Jump-Server VM.

8

Run the saved session 'Remove Latency from WAN1..".

9

The session will run the following:

10

The Latency of WAN1 will decrease.

11

Link Swap Event will be generated: WAN 1 meets the steering condition.