CHECK POINT · TROUBLESHOOTING

Troubleshoot Check Point: a gateway that won’t connect

SMS1 refuses to add GW1. Both seem to be set up. Try to add it, read each refusal, and fix what it names. Then look at why someone would use fw unloadlocal, and why you shouldn’t leave a gateway that way.

Check Point-style track · Check Point-style, Buddy Security Console, Cisco router · 4 objectives

Open in simulator More Check Point-style labs

Objectives

The simulator ticks each one as soon as the network meets it.

show interfaces all on GW1: Mgmt has the wrong address. It must be 10.0.0.2/24. Save the configuration.
The one-time password on GW1 was forgotten: set it again with cp_conf sic init LABKEY.
On SMS1: add GW1 with that password. Trust is established.
fw stat on GW1 shows InitialPolicy, because adding a gateway installs nothing.

Start this lab