Tài liệu Internet Security Product Suite Getting Started Guide Version pdf

Internet Security Product Suite

Getting Started Guide

Version NGX R65

702023 January 24, 2008

3

© 2003-2007 Check Point Software Technologies Ltd.

All rights reserved. This product and related documentation are protected by copyright and

distributed under licensing restricting their use, copying, distribution, and decompilation. No part of

this product or related documentation may be reproduced in any form or by any means without prior

written authorization of Check Point. While every precaution has been taken in the preparation of

this book, Check Point assumes no responsibility for errors or omissions. This publication and

features described herein are subject to change without notice.

RESTRICTED RIGHTS LEGEND:

Use, duplication, or disclosure by the government is subject to restrictions as set forth in

subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS

252.227-7013 and FAR 52.227-19.

TRADEMARKS:

©2003-2008 Check Point Software Technologies Ltd. All rights reserved. Check Point, AlertAdvisor,

Application Intelligence, Check Point Endpoint Security, Check Point Express, Check Point Express

CI, the Check Point logo, ClusterXL, Confidence Indexing, ConnectControl, Connectra, Connectra

Accelerator Card, Cooperative Enforcement, Cooperative Security Alliance, CoreXL, CoSa,

DefenseNet, Dynamic Shielding Architecture, Eventia, Eventia Analyzer, Eventia Reporter, Eventia

Suite, FireWall-1, FireWall-1 GX, FireWall-1 SecureServer, FloodGate-1, Hacker ID, Hybrid Detection

Engine, IMsecure, INSPECT, INSPECT XL, Integrity, Integrity Clientless Security, Integrity

SecureClient, InterSpect, IPS-1, IQ Engine, MailSafe, NG, NGX, Open Security Extension, OPSEC,

OSFirewall, Pointsec, Pointsec Mobile, Pointsec PC, Pointsec Protector, Policy Lifecycle

Management, Provider-1, PureAdvantage, PURE Security, the puresecurity logo, Safe@Home,

Safe@Office, SecureClient, SecureClient Mobile, SecureKnowledge, SecurePlatform, SecurePlatform

Pro, SecuRemote, SecureServer, SecureUpdate, SecureXL, SecureXL Turbocard, Security

Management Portal, Sentivist, SiteManager-1, SmartCenter, SmartCenter Express, SmartCenter

Power, SmartCenter Pro, SmartCenter UTM, SmartConsole, SmartDashboard, SmartDefense,

SmartDefense Advisor, Smarter Security, SmartLSM, SmartMap, SmartPortal, SmartUpdate,

SmartView, SmartView Monitor, SmartView Reporter, SmartView Status, SmartViewTracker, SMP,

SMP On-Demand, SofaWare, SSL Network Extender, Stateful Clustering, TrueVector, Turbocard,

UAM, UserAuthority, User-to-Address Mapping, UTM-1, UTM-1 Edge, UTM-1 Edge Industrial,

UTM-1 Total Security, VPN-1, VPN-1 Accelerator Card, VPN-1 Edge, VPN-1 Express, VPN-1 Express

CI, VPN-1 Power, VPN-1 Power Multi-core, VPN-1 Power VSX, VPN-1 Pro, VPN-1 SecureClient,

VPN-1 SecuRemote, VPN-1 SecureServer, VPN-1 UTM, VPN-1 UTM Edge, VPN-1 VSX, Web

Intelligence, ZoneAlarm, ZoneAlarm Anti-Spyware, ZoneAlarm Antivirus, ZoneAlarm ForceField,

ZoneAlarm Internet Security Suite, ZoneAlarm Pro, ZoneAlarm Secure Wireless Router, Zone Labs,

and the Zone Labs logo are trademarks or registered trademarks of Check Point Software

Technologies Ltd. or its affiliates. ZoneAlarm is a Check Point Software Technologies, Inc. Company.

All other product names mentioned herein are trademarks or registered trademarks of their

respective owners. The products described in this document are protected by U.S. Patent No.

5,606,668, 5,835,726, 5,987,611, 6,496,935, 6,873,988, 6,850,943, and 7,165,076 and may be

protected by other U.S. Patents, foreign patents, or pending applications.

For third party notices, see “THIRD PARTY TRADEMARKS AND COPYRIGHTS” on page 101.

4

5

Contents

Chapter 1

Internet Security Product Suite NGX R65

Welcome...................................................................................9

In This Guide ..........................................................................11

NGX R65 Documentation .........................................................11

Endpoint Security Integration....................................................11

Feedback................................................................................11

Chapter 2

Introduction

Overview .................................................................................13

Product CD-ROMs....................................................................14

On CD1.......................................................................... 14

On CD2.......................................................................... 15

On CD3.......................................................................... 16

On CD4.......................................................................... 17

On CD5.......................................................................... 18

For New Check Point Customers................................................19

What’s New in NGX R65 ..........................................................20

SmartCenter................................................................... 20

FireWall and SmartDefense.............................................. 21

Connectra Central Management........................................ 21

VPN............................................................................... 21

ClusterXL ....................................................................... 22

Eventia Analyzer ............................................................. 22

Eventia Reporter............................................................. 22

SecureClient Mobile........................................................ 23

UTM-1 Edge................................................................... 23

Provider-1/SiteManager-1 ................................................ 23

6

Chapter 3

Getting Started

VPN-1 Power/UTM Terminology.................................................26

Provider-1/SiteManager-1 Terminology .......................................27

Hardware and Software Requirements........................................29

Compatibility Table ..................................................................29

Notes to Compatibility Table ............................................ 31

Notes to Supported by Platform Table ............................... 32

Supported Upgrade Paths and Interoperability ............................33

Upgrading Management Servers........................................ 33

Backward Compatibility For Gateways ............................... 33

Licensing NGX R65..................................................................35

Licensing VPN-1 Power/UTM............................................ 35

Licensing Provider-1/SiteManager-1.................................. 36

Upgrading VPN-1 Power/UTM Licenses ............................. 37

Licensing Eventia Suite ................................................... 38

Chapter 4

Performing a New Installation

Overview .................................................................................39

VPN-1 Power/UTM Installation ..................................................40

Installing on SecurePlatform ............................................ 42

Installing on a Windows Platform...................................... 53

Installing on a Solaris Platform......................................... 55

Installing on a Linux Platform........................................... 57

Installing on a Nokia Platform .......................................... 60

Initial Configuration......................................................... 63

Provider-1/SiteManager-1 Installation ........................................71

Overview......................................................................... 71

Building the Standard Provider-1 Network ......................... 73

Logging In to the MDG for the First Time........................... 78

Table of Contents 7

Where To From Here? .............................................................. 81

Chapter 5

Installing the Eventia Suite

Eventia Suite Installation......................................................... 84

Standalone Installation vs. Distributed Installation ..................... 85

Installing Eventia Suite on Multiple Versions of SmartCenter

Management.................................................................. 85

Standalone Installation............................................................ 86

Windows Platform .......................................................... 86

Solaris & Linux Platforms................................................ 88

SecurePlatform .............................................................. 88

Distributed Installation ............................................................ 89

Windows Platform .......................................................... 89

Solaris & Linux & SecurePlatform .................................... 91

Enabling Connectivity Through a Firewall................................... 92

Preparing Eventia Suite in SmartCenter..................................... 94

Working with R55 SmartCenter Server.............................. 95

Preparing Eventia Suite on Provider-1 MDS ............................... 96

For Provider-1/SiteManager-1 Version R55 ....................... 96

For Provider-1/SiteManager-1 Version R60 ....................... 98

For Provider-1/SiteManager-1 Version R61 and Up............ 99

Index...................................................................109

8

9

Chapter 1

Internet Security Product

Suite NGX R65

In This Chapter

Welcome

Thank you for choosing Check Point’s Internet Security

Product Suite. We hope that you will be satisfied with this

solution and our support services. Check Point products

provide your business with the most up to date and secure

solutions available today.

Check Point also delivers worldwide technical services

including educational, professional and support services

through a network of Authorized Training Centers, Certified

Support Partners and Check Point technical support personnel

to ensure that you get the most out of your security

investment.

Welcome page 9

In This Guide page 11

NGX R65 Documentation page 11

Endpoint Security Integration page 11

Feedback page 11

Welcome

10

To extend your organization’s growing security infrastructure and

requirements, we recommend that you consider adopting the OPSEC

platform (Open Platform for Security). OPSEC is the industry's open,

multi-vendor security framework, which has over 350 partners and the

largest selection of best-of-breed integrated applications and

deployment platforms.

For additional information on the NGX Internet Security Product Suite

and other security solutions, go to: http://www.checkpoint.com or call

Check Point at 1(800) 429-4391. For additional technical

information, go to: http://support.checkpoint.com.

Welcome to the Check Point family. We look forward to meeting all of

your current and future network, application and management

security needs.

In This Guide

Chapter 1 Internet Security Product Suite NGX R65 11

In This Guide

This guide provides a brief overview of NGX R65 Internet Security

Product Suite applications and installation procedures.

NGX R65 Documentation

Technical documentation is available on your NGX R65 CD-ROM at:

CD2\Docs\CheckPoint_Suite. These documents can also be

found at: http://www.checkpoint.com/support/technical/documents

To find out about what's new in NGX R65, read the NGX R65 What’s

New document.

For information on upgrading your current Check Point deployment,

refer to the Check Point R65 Upgrade Guide.

For upgrading Endpoint Security, refer to the Endpoint Security

Installation Guide.

Endpoint Security Integration

For in-depth documentation of Provider-1/SiteManager-1 and

SmartCenter Integration with Check Point Endpoint Security products,

refer to:

• Endpoint Security Installation Guide

• R65 SmartCenter Administration Guide

Feedback

Check Point is engaged in a continuous effort to improve its

documentation. Please help us by sending your comments to: