Check Point Power-1 11067 manuale d’uso

26 August 2010 Getting Started G uide Power-1 Models: P-10, P-20, P- 30[...]

© 2010 Check Point Software Technologies L td. All rights reserved. T his product and relate d docum entation are protected b y copyright and distributed und er licensing restricting th eir use, cop ying, distribution, and decom pilation. No part of this product or related documentation m ay be reproduced in an y form or b y any m eans without pri[...]

Important Informat ion Latest Version The latest version of this document is at: http://supp ortconte nt.check point.com /docum entation_ downloa d?ID=109 50 For additional techn ical inform ation, visit the Ch eck Point Supp ort Center ( http://su pportcenter .check point.com ) . Revision History Date Description 26 August 2010 Initial version Fee[...]

W elc ome Health and Safety Information Page 4 Health and Safe ty Information Read the following warnings bef ore setting up or using the appliance. Warning - Do not b lock air vents. A m inimum 1/2 -inch clearance is required. Warning - T his appliance does not conta in any user- serviceable parts . Do not remove an y covers or attem pt to gain ac[...]

W elc ome Health and Safety Information Page 5 Federal Communications Commission (FCC) Statement: Note: This equipm ent has been teste d and found to c omply with the lim its for a Class A di g ital device, pursuant to Part 15 of the FCC Ru les. These lim its are designed to provide reason able protection agains t harmful interference when the equi[...]

Contents Important Infor mation ............................................................................................. 3 Health and Safe ty Infor mation ............................................................................... 4 Introduction ...............................................................................................[...]

Page 7 Chapter 1 Introduction In This Chapter W elco me 7 Power-1 Overvie w 7 Shipping Carton Co ntents 8 Term inology 8 Welcome Thank you for choos ing Check Point’ s Power-1. W e hope that you will be satisfied with this sol ution and our support services. Check Point products prov ide your business with the most up to date an d secure solution[...]

Shipping Carton Contents Introduction Page 8 Note - Screen shots i n this guide m ay apply only to the highest model to which this guide ap plies. Shipping Carton Contents This section desc ribes the contents of the shipping carton. Table 1-1 Content s of the Shipping Carton Item Description Appliance A single Power-1 a ppliance: Rack Mounting Acc [...]

Page 9 Chapter 2 Configuring Powe r-1 The workf low for configuring Power -1 is: 1. Mount the Power-1 in the rack . 2. Connect the cables an d power on. 3. Perform the initial c onfiguration. 4. Add the Power-1 o bject in Sm artDashboard and install a pol icy. Note - Securit y Management Server is not installed locall y on Power - 1. In a productio[...]

Mounting Power-1 in a Rack Configuring Power-1 Page 10 Mounting Po w er-1 in a Rack Mount the system in the rack with the n etwork ports f acing the front of the rack . Figure 2-1 Installing Power-1 Connecting the Power Cables and Power On 1. Connect the power c ables. 2. On the back panel, turn on the Pow er button to start t he appliance. Note - [...]

Using the First Time Configuration Wizard Configuring Power-1 Page 11 3. W ait for the appliance to initialize and boot. T he status of the appl iance appears on the LCD s creen: The appliance is re ady for use when the m odel num ber is displayed. Using the First Time Configuration Wizard 1. Connect a standard network cable to the appliance's[...]

Using the First Time Configuration Wi zard Configuring Power-1 Page 12 Click Next . 8. Configure Network Connections in the Netw ork Connections p age. If you modif y the Mgmt address, a secondar y interface is autom atically created to preserve co nnectivit y. This secondar y interface can be remove d on the Network > Network Connectio ns pag e[...]

Creating the Power-1 Object in SmartDashboard Configuring Power-1 Page 13 c Click Finish to com plete the First T ime Configuration W izard. The mach ine will automaticall y restart (this ma y take severa l minutes). Note - It is recomm ended to back up the system conf iguration. The backup menu c an be access ed via the W ebUI interface under the [...]

Advanced Configuration Configuring Power-1 Page 14 Connecting to the Power-1 CLI You can connect to th e comm and line interface of the Power - 1 appliance using:  The provided seria l console cable (DT E to DTE) and term inal emulation software s uch as HyperTerm inal (from W indow s) or Minicom (from Unix/Linux s y stem s). Connection param et[...]

Page 15 Chapter 3 Power-1 Hardwar e This chapter provides i nstructions for instal ling and rem oving hardware components on t he Power - 1 appliance. In This Chapter Front Panel Com ponents 16 Rear Panel Com ponents 21 Customer Replace able Parts 23[...]

Front Panel Components Power-1 Hardware Page 16 Front Panel Components This section desc ribes the features and com ponents located on th e appliance fr ont panel. Power-1 11000 Series Front Panel Key Description 1 LCD display screen 2 Management connec tion port - Ethernet connection to a remote m anagement workstation 3 Synchronization port - for[...]

Front Panel Components Power-1 Hardware Page 17 Power-1 9070 Front Panel Key Description 1 LCD display screen 2 Management connec tion port - Ethernet connection to a remote m anagement workstation 3 Synchronization port - for synchron izing with cluster m embers or a high availabilit y peer 4 Console port - f or a serial connection to the applianc[...]

Front Panel Components Power-1 Hardware Page 18 Power-1 5070 Front Panel Key Description 1 LCD display screen 2 Management connec tion port - Ethernet connection to a remote m anagement workstation 3 Synchronization port - for synchron izing with cluster m embers or a high availabilit y peer 4 Console port - f or a serial connection to the applianc[...]

Front Panel Components Power-1 Hardware Page 19 Menu Sub-menu Purpose Set Internal IP or Set Mgmt IP Set the managem ent interface IP address (cannot be edited when DHCP is enabled) Set Netmask Set the managem ent interface network mask (cannot be edited when DHCP is enabled) Set Default GW Set the managem ent interface default gatewa y (cannot be [...]

Front Panel Components Power-1 Hardware Page 20 Expansion Line Cards The Power-1 app liance con tains optional expans ion slots that accom modate cold -s wappable network line cards.  Power-1 5070 supports one network expansion slot  Power-1 9070 supports two network expansion slots According to type, each ex pansion line card co ntains two o[...]

Rear Panel Components Power-1 Hardware Page 21 Power-1 9070 and 11000 series m odels contain two h ot-s wappable redundant ha rd disk drives (RAID1). Figure 3-3 Hard Disk Drives RAID1 Mirroring Implemented b y a dedicated RAID contro ller, the Power - 1 9070 model perf orms RAID1 m irroring across two hard disk drives. Mir ror rebuild is autom atic[...]

Rear Panel Components Power-1 Hardware Page 22 Redundant Pow er Su pply Units Located at the righ t rear of the app liance, two hot -swappable po wer supply units prov ide built- in power redundanc y. Each power supply connects t o an electric outlet. Figure 3-4 Redundant Power Supply Units W hen a power supply fails or is not conn ected to the out[...]

Cu stomer Replaceable Parts Power-1 Hardware Page 23 Customer Replaceable Parts To ensure m aximum availability and ease of maintenance, the Po wer- 1 appliance conta ins the following custom er replaceable parts: Power-1 5070 Power-1 9070 Power-1 11000 Se ries Power supplies 2 2 2 Cooling fans 3 3 3 Expansion line cards 1 1 with additional slot 1 [...]

Customer Replaceable Parts Power-1 Hardware Page 24 Power Supply This section prese nts the procedures f or removing and insta lling a power suppl y unit. Power -1 appliance contains two redunda nt power supplies . Figure 3-5 Redundant Power Supply Units Removing the Po wer Supply To remove a po wer supply unit: 1. If the alarm sounds, press the re[...]

Customer Replaceable Parts Power-1 Hardware Page 25 Cooling Fan This section presents the procedures f or removing a nd installing a f an unit. The Po wer-1 applianc e contains three cooling fans. It is n ot necessar y to power off the applianc e before adding or removing a fan unit. Figure 3-6 Cooling Fans Removing Fan Units To remove a fan unit: [...]

Customer Replaceable Parts Power-1 Hardware Page 26 Important - Mak e certain that you are electromagnet ically grounded when perform ing the following procedures. Static e lectricity can damage the appliance. Figure 3-7 Expansion Line Card Removing Expan sion Lin e Cards To remove an expans ion line card: 1. Power off the applianc e and rem ove th[...]

Customer Replaceable Parts Power-1 Hardware Page 27 Figure 3-8 Hard Disk Drives Removing a Ha rd Disk Drive To remove a hard d isk drive: 1. Power-1 5070 onl y: Hard disk drive is not hot-s wappable. Turn of f the appliance and rem ove the power cords from the power supply unit before attem pting to rem ove the hard disk drive. 2. Using the ke y su[...]

Page 28 Chapter 4 Restoring Fact ory Defaults As part of the troubl eshooting process, it m ay be necess ary to restore the Power -1 appliance to its f actory default settings. You can restore your Power- 1 appliance to the fac tory default image using o ne of the follo wing methods:  Using the W ebUI  Through the console b oot m enu  Usin[...]

Restoring Using the LCD Panel Restoring Factory Defaults Page 29 7. During the Power- 1 boot proces s, text similar to that s hown below appears : Figure 4-9 Activating the Boot menu in HyperTerminal 8. At this point, you ha ve approxim ately four seconds to hit any ke y to activate the Boot m enu. 9. The Boot m enu opens. Scroll to the re levant R[...]

Restoring Using the LCD Panel Restoring Factory Defaults Page 30 Pressing an y other button causes the Acti on Canceled message to displa y: At this point, pressing a ny key returns you to the boot m enu. 6. Once you have confirm ed the reset, wait f or the appliance to res tore the factor y image. W hile the appliance is restored t o the default i[...]

Page 31 Chapter 5 Registration and Support In This Chapter Registration 31 Support 31 W here To From Here? 31 Registration Power-1 requires a sp ecific Check Point license. Obtain a license and register at the Chec k Point Appliance Registration site ( http://register.c heckpoint.com /cpapp ). Support For additional techn ical inform ation about Ch[...]