CHECK POINT · FOUNDATIONS

Check Point-style: a gateway and its manager

A Check Point-style deployment splits in two. The gateway handles its own interfaces and routes, in its Gaia-style console, and they change at once. Its policy comes from a separate manager, which must first be trusted: a one-time password sets that up. Select GW1 and press Open Gateway Portal, or SMS1 and Open Buddy Security Console. The consoles take the same lines.

Check Point-style track · Check Point-style, Buddy Security Console, Cisco router · 4 objectives

Open in simulator More Check Point-style labs

Objectives

The simulator ticks each one as soon as the network meets it.

On GW1: Mgmt at 10.0.0.2/24, eth1 at 192.168.1.1/24 and eth2 at 203.0.113.1/24, both on, and a default route to 203.0.113.2. Then save config, or a reboot would lose them.
On GW1: cp_conf sic init LABKEY sets the one-time password. fw stat shows it still runs InitialPolicy, which drops traffic.
On SMS1: Mgmt at 10.0.0.5/24. Then add the gateway: mgmt_cli add simple-gateway name GW1 ipv4-address 10.0.0.2 one-time-password LABKEY.
On SMS1: get its interfaces (mgmt_cli get-interfaces target-name GW1), and set eth1 internal and eth2 external.

Start this lab