Page 1
Smart-1 5 & Smart-1 25 Getting Started Guide Models: S-10, S-21 8 December 2011 704548...
Page 2
Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice.
Panel" on page 30) Two high capacity disk drives with improved RAID system ("Hard Disk Drives" on page 33) For the previous Smart-1 25 Getting Started Guide, see Smart-1 5 and 25 Getting Started Guide (http://supportcontent.checkpoint.com/documentation_download?ID=10 949). 23 February 2011 Dedicated SmartEvent Server option available from R75 only ("Security Management Installation...
Welcome Health and Safety Information Read the following warnings before setting up or using the appliance. Warning - Do not block air vents. A minimum 1/2-inch clearance is required. Warning - This appliance does not contain any user-serviceable parts. Do not remove any covers or attempt to gain access to the inside of the product.
Page 5
Welcome Federal Communications Commission (FCC) Statement: Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
This document provides: ................. 9 Shipping Carton Contents..................9 Terminology......................9 SmartEvent Terminology ..................10 Mounting Smart-1 25 in a Rack ................11 Safety Instructions ....................11 Determining Space and Weight Requirements ...........12 Rack Mounting Hardware and Required Tools ...........13 Preparing the Appliance ..................14 Attaching the Appliance Rails to the Appliance ..........14...
Page 7
Front Panel ....................30 LCD Display Screen..................30 Hard Disk drives ....................32 Customer Replaceable Parts ................32 Power Supply ....................32 Hard Disk Drives ....................33 Removing a Hard Disk Drive ................33 Installing a Hard Disk Drive ................33 Restoring Factory Defaults .................. 34 Restoring Factory Defaults using the WebUI ............34 Restoring Factory Defaults using the Console ............34 Restoring Using the LCD Panel ................35 Lights Out Management ..................
SmartEvent Terminology Welcome Thank you for choosing Check Point’s Smart-1. We hope that you will be satisfied with this system and our support services. Check Point products are the most up to date and secure solutions available today. Check Point also delivers worldwide educational, professional and support services through a network of Authorized Training Centers, Certified Support Partners and Check Point technical support personnel.
SmartEvent Terminology SmartDashboard: A SmartConsole GUI application that is used by the system administrator to create and manage the security policy. Management High Availability (HA): Refers to a configuration in which a primary Security Management server has one or more backup secondary Security Management servers which are ready to take over in case of failure of the primary Security Management server.
Safety Instructions Mounting Smart-1 25 in a Rack These instructions show how to install Smart-1 25 in a standard 19 inch rack. Safety Instructions Before installing your appliance in a rack cabinet, review the following guidelines: Make sure that the room air temperature is below 35°C (95°F).
The mounting holes in a standard 19-inch (482.6 mm) server rack rail are arranged as follows: When installing appliances, start measuring from the center of the two holes with closer spacing. Otherwise, the screw holes on the appliance may not match those on the rack. Mounting Smart-1 25 in a Rack Page 12...
Attaches slide to mounting brackets RoHS NUT-Flange M4 Coating Ni Threaded washer. Attaches slide to mounting brackets RoHS 14.0*L8-Ni Appliance ear bracket Attaches to the Smart-1 25 front panel. Both bracket ears are identical. Mounting Smart-1 25 in a Rack Page 13...
2. Identify the front end. The front end is straight, not grooved. A serial number is engraved near the front end. 3. Position the appliance rail on one side of the appliance so that four holes are visible. Mounting Smart-1 25 in a Rack Page 14...
Place a threaded washer on the screw. Leave it slightly loose. (You will tighten it later). e) Insert one more screw through the fourth hole in the slide (furthest from the front), then through the slot in the bracket. Mounting Smart-1 25 in a Rack Page 15...
You may need to hold the threaded washer with a pair of pliers while you tighten the screw. 8. Repeat for the other side of the rack: Attach the slide and mounting bracket assembly to the other side of the rack. Mounting Smart-1 25 in a Rack Page 16...
Installing Smart-1 25 in the Rack Installing Smart-1 25 in the Rack 1. Extend the slide fully. 2. Carefully line up the appliance with the rail, and push it about half way in. You will hear a click. 3. To slide the appliance fully into the rack, press the slide latch on the left, then on the right. Take care not to trap a finger.
Chapter 2 Configuring Smart-1 The basic workflow for configuring Smart-1 is: 1. Connect the cables and power on. 2. Perform the initial configuration using the First Time Configuration Wizard. 3. Install the SmartConsole GUI clients. In This Chapter Connecting the Power Cables and Power On Using the First Time Configuration Wizard Installing the SmartConsole GUI Clients Completing the Configuration...
Using the First Time Configuration Wizard Starting the First Time Configuration Wizard 1. Connect a standard network cable to the appliance's management interface and to your management network. The management interface is marked Mgmt. This interface is preconfigured with the IP address 192.168.1.1.
Using the First Time Configuration Wizard Network Connections Configure the network connections in the Network Connections page. You can change the Management IP address. Connectivity is maintained with an automatically created secondary interface. You can remove this interface after you complete the wizard in the Network > Network Connections page.
Security Management server fails. This option applies only in a Management HA deployment. Log Server is the repository for log entries generated on gateways. Check Point gateways send their log entries to the Log Server. SmartEvent and SmartReporter Suite Installation Type Configure the SmartEvent and Reporter Suite applications to run on the server.
You have now completed the Smart-1 configuration. To start working with your Smart-1 appliance as a Security Management Server refer to the Security Management Server Administration Guide for your software version in the Check Point Support Center (http://supportcenter.checkpoint.com). Completing the Configuration After you have finished the basic configuration of Smart-1, you can configure SmartEvent ("Configuring...
Advanced Configuration Advanced Configuration Advanced configuration can be done using the sysconfig menu which can only be accessed using the command line interface. Note - The sysconfig menu is only available after running the First Time Configuration Wizard in the WebUI.
2. In SmartDashboard, create a new host for each computer that contains a component of SmartEvent: a) Select Manage > Network Object > New > Check Point > Host b) In the General Properties window, click Communication and enter the activation key.
The report data will be stored in the default database table named CONNECTIONS. The preselected logs are the sequence of log files that are generated by Check Point products. The preselected logs session will begin at the beginning of the last file in the sequence, or at the point the sequence was stopped.
Page 26
Configuring the SmartEvent Clients If you want to customize the Consolidation session refer to the SmartReporter Administration Guide for your software version on the Check Point Support Center (http://supportcenter.checkpoint.com). Configuring SmartEvent Page 26...
Chapter 4 Smart-1 Hardware This chapter provides instructions for installing and removing hardware components on the Smart-1 appliance. In This Chapter Smart-1 5 Smart-1 25 Customer Replaceable Parts Hard Disk Drives Page 27...
Smart-1 5 Smart-1 5 This section describes the features and components located on the Smart-1 5 appliance. Front Panel Description LCD display screen Screen operation keys Console port - for a serial connection to the appliance using a terminal emulation program such as HyperTerminal USB ports Management configuration port Built-in Ethernet ports (Lan1-Lan4)
Page 29
Smart-1 5 Menu Sub-menu Purpose Set Net mask Set the management interface network mask Set Default GW Set the management interface default gateway System Reboot Reboot the appliance To enter an IP address: Action Press Move to the next digit Move back to the previous digit Approve the change...
Smart-1 25 Smart-1 25 This section describes the features and components located on the Smart-1 25 appliance. Front Panel Item Description Management configuration port Ethernet connection ports (Lan1 - Lan2) Console RJ-45 port to connect to a computer using a terminal emulation...
Page 31
Smart-1 25 Item Description On/Off indicator LED Network Access LED Disk Access LED LCD Display - Not currently used - Navigate within a menu ? - Not currently used - Not currently used Enter - Select a menu option or go to the main menu.
Two power supplies Two hard disk drives The Check Point warranty and support agreements do not let you replace parts unless told to do so by a technical support representative. Do not open the Smart-1 case. Power Supply This section presents the procedures for removing and installing a power supply unit. The Smart-1 appliance contains two redundant power supplies.
Hard Disk Drives Hard Disk Drives The Smart-1 25 appliance contains two 3-1/2", hot-swappable hard disk drives (RAID 1). This lets you do RAID 1 mirroring across the drives using a dedicated LSI Logic RAID controller. Use the SecurePlatform raidconfig command to do basic maintenance and monitoring procedures on your Smart-1 RAID array.
Chapter 5 Restoring Factory Defaults You may restore the factory default images on the appliance using the WebUI, a console connection application (such as HyperTerminal) or the LCD panel. Important - Restoring factory default images will delete all information on the appliance including images, backup files, and logs.
Restoring Using the LCD Panel 5. While booting up, the following text appears: 6. When this text appears, there are approximately four seconds to press any key in order to bring up the boot grub menu. Once the boot grub menu is displayed, there will be approximately ten seconds to press any key or the machine will continue booting up.
Page 36
Restoring Using the LCD Panel 5. Once you have confirmed the reset, wait for the appliance to restore the factory image. While the appliance is restored to the default image, a Reverting image don't turn off message displays continuously. When the appliance has been restored to its default factory configuration, the appliance reboots and the Initializing message appears.
Chapter 6 Lights Out Management This chapter discusses the Lights-Out Management (LOM) integrated card that is supplied with the Smart-1 25 appliance and basic configuration options. In This Chapter Introduction Initial Login Basic Configuration Options Remotely Controlling the Appliance Remotely Controlling the Power of the Appliance Managing LOM Card Users Configuring LOM Keyboard and Mouse Configuring LOM Network...
Introduction Introduction The Check Point Lights Out Management (LOM) is an optional card that you can use with Check Point appliances. You can remotely control Check Point appliances using a dedicated management channel. Lights Out Management also works when the appliance is turned off or not responding.
Remotely Controlling the Power of the Appliance 2. Select KVM Console and then Open Console. A new window opens that enables you to remotely control the Smart-1 appliance. Remotely Controlling the Power of the Appliance Using the LOM card, it is possible to remotely switch ON the Smart-1 appliance even if the power is off, switch OFF the appliance, or reset the appliance.
Configuring LOM Keyboard and Mouse To modify a user: 1. Select an existing user from the list and click Modify. The User Modify dialog box appears. 2. Modify the fields as required. 3. To change the password, select Change Password. 4.
See the relevant documentation for your software version on the Check Point Support Center: Check Point documentation is available on the Check Point Support Center (http://supportcenter.checkpoint.com). Be sure to also use the Online Help when you are working with the Check Point SmartConsole clients. Page 41...
Need help?
Do you have a question about the Smart-1 25 and is the answer not in the manual?
Questions and answers