Book Image

Check Point Firewall Administration R81.10+

By : Vladimir Yakovlev
Book Image

Check Point Firewall Administration R81.10+

By: Vladimir Yakovlev

Overview of this book

Check Point firewalls are the premiere firewalls, access control, and threat prevention appliances for physical and virtual infrastructures. With Check Point’s superior security, administrators can help maintain confidentiality, integrity, and the availability of their resources protected by firewalls and threat prevention devices. This hands-on guide covers everything you need to be fluent in using Check Point firewalls for your operations. This book familiarizes you with Check Point firewalls and their most common implementation scenarios, showing you how to deploy them from scratch. You will begin by following the deployment and configuration of Check Point products and advance to their administration for an organization. Once you’ve learned how to plan, prepare, and implement Check Point infrastructure components and grasped the fundamental principles of their operation, you’ll be guided through the creation and modification of access control policies of increasing complexity, as well as the inclusion of additional features. To run your routine operations infallibly, you’ll also learn how to monitor security logs and dashboards. Generating reports detailing current or historical traffic patterns and security incidents is also covered. By the end of this book, you'll have gained the knowledge necessary to implement and comfortably operate Check Point firewalls.
Table of Contents (21 chapters)
1
Part 1: Introduction to Check Point, Network Topology, and Firewalls in Your Infrastructure and Lab
6
Part 2: Introduction to Gaia, Check Point Management Interfaces, Objects, and NAT
13
Part 3: Introduction to Practical Administration for Achieving Common Objectives

Configuring a remote gateway and creating its policy

When we were creating our lab, the gateway object for the right side of our environment (the CPGW) was just cloned, but we never completed its configuration. It is time to do so now. Since we’ve already used the Gaia First Time Configuration Wizard a number of times, no screenshots will be provided for FTW, but step-by-step instructions for it are provided:

  1. From VirtualBox, start CPGW [1]. In its console, note that the hostname [2] is that of the linked clone. We are also seeing reminders that the FTW was not yet completed:

Figure 12.1 – The unconfigured CPGW VM

Before we run the FTW, let’s change its hostname and the IP addresses of its interfaces, lock down the Gaia access to only that of our SmartConsole_VM, and set its expert password.

  1. Type in the following commands, pressing Enter after each line:
    set hostname CPGW
    set interface eth0 ipv4-address 200.200.0.1 subnet...