Download Print this page

Nokia IP51 Installation Manual

Hide thumbs

Advertisement

Quick Links

IP51 Installation Guide
Part Number: N450540001 Rev A
September 2001

Advertisement

loading

  Related Manuals for Nokia IP51

  Summary of Contents for Nokia IP51

  • Page 1 IP51 Installation Guide Part Number: N450540001 Rev A September 2001...
  • Page 2 IMPORTANT NOTE TO USERS This software is provided by Nokia Corporation. as is and any express or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia Corporation be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...
  • Page 3 Tel: 1-877-997-9199 313 Fairchild Drive Outside USA and Canada: +1 512-437-7089 Mountain View, CA 94043-2215 e-mail: info.ipnetworking_americas@nokia.com Europe Nokia House, Summit Avenue Tel: 00800 5543 1816 or 1+44 (0) 8700 555 777 Southwood, Farnborough e-mail: info.ipnetworking_emea@nokia.com Hampshire GU14 ONG U.K Asia-Pacific...
  • Page 5: Table Of Contents

    ......... 9 About the IP51........9 IP51 Documentation .
  • Page 6 ......51 Configuring the IP51 ......52 Configuring the Management Server.
  • Page 7 ......... . 125 IP51 Installation Guide...
  • Page 8 Contents viii IP51 Installation Guide...
  • Page 9: Preface

    Preface About the IP51 The Nokia IP51 is an easy to use security appliance that is tightly integrated with Check Point FireWall-1 SmallOffice software. By using the IP51’s security features, you can protect your network from dangerous attacks. Check Point management and logging servers provide all security policy and event logging services to the IP51 through the Check Point FireWall-1 module.The IP51 can be managed by all of the Check Point...
  • Page 10: Ip51 Documentation

    The IP51 Release Notes provide information about various items of note. The IP51 CLI Reference Guide explains how to use the command-line interface to set up and manage the IP51. You can find this document on the CD that came with the IP51.
  • Page 11: Planning Your Setup

    Planning Your Setup CHAPTER 1 Before you install a Nokia IP51, you should make sure that you have everything you need and decide how you will configure it. This chapter lists all the requirements and helps you with the planning process.
  • Page 12: Computer Requirements

    Computer Requirements The following requirements apply to the computer that you use to set up the IP51 and the computers you attach to it after it has been set up: • Windows or Windows NT (4.0 or later) computers that have Ethernet network cards (10 mbps or 10/100 mbps) installed •...
  • Page 13 Figure 1-1. IP51 Connected to a DSL Modem and Using NAT (IP addresses from ISP) Router 209.221.75.11 209.221.75.13 Internet 209.221.75.12 209.221.75.14 209.221.75.10 IP51 209.221.75.9 Figure 1-2. IP51 Connected to a DSL or T1 Router and Using Traditional Routing IP51 Installation Guide...
  • Page 14: Gathering Information For The Installation

    192.168.1.4 Figure 1-3. IP51 Connected to a Router and Using NAT The LAN ports of the IP51 comprise a 10/100 mpbs switch and should be used to create a single network segment. You cannot not divide this segment into subsegments (for example, for use in a DMZ).
  • Page 15 You plan to use Check Point FireWall-1 and Check Point NAT • Traditional routing: You can use this mode when the IP51 is behind a DSL or T1 router and you have a range of IP addresses provided by your ISP. You must set up each computer on your LAN with a specific IP address and other networking information.You should use this...
  • Page 16 Answers Connection What is the LAN subnet • ____.____.____.____ mask? This is the subnet mask of your existing LAN. What is the IP51 WAN IP • ____.____.____.____ address? • For NAT-enabled routing, use the public IP address provided by your ISP.
  • Page 17 LAN, use its address (your ISP may provide two addresses). NOTE: The IP51’s DNS server is disabled by default as a security measure. See the IP51 User Guide for information on enabling the IP51’s DNS server. IP51 Installation Guide...
  • Page 18 Chapter 1: Planning Your Setup IP51 Installation Guide...
  • Page 19: Setting Up The Hardware

    Setting Up the Hardware CHAPTER 2 This chapter explains how to connect the IP51 to your network and how to configure it and the computers on the network to work together. IP51 Installation Guide...
  • Page 20: Connecting The Hardware

    Router or DSL Modem IP51 Figure 2-1. Connecting the IP51 Use an Ethernet cable to connect the IP51 to one of your computers. Use another Ethernet cable to connect the IP51 to your router or DSL modem. Connect the IP51’s power cable.
  • Page 21: Setting Up A Computer

    Setting Up a Computer You must manually set the TCP/IP settings on your computer so that it works with the IP51. Verify that the power to your IP51 is on, and then use the following procedure: From the Start menu, choose Settings, and then choose Control Panel.
  • Page 22 Chapter 2: Setting Up the Hardware Open your browser and enter 192.168.1.1 in the URL field. The IP51 Setup page appears. Your computer is now set up and ready for use with the IP51. If you are using Internet Explorer, disable browser caching. If NOTE: caching is enabled, Internet Explorer displays cached pages when possible, and the information in the cached pages might not be current.
  • Page 23: Setting Up The Ip51

    Restore Defaults Button Figure 2-2. Restore Defaults Button Depending on the routing mode you’ve decided to use, go to one of the following sections for the instructions for setting up the IP51: • “Using NAT-Enabled Routing” (see page 24) •...
  • Page 24: Using Nat-Enabled Routing

    Chapter 2: Setting Up the Hardware Using NAT-Enabled Routing In the IP51 Setup page, click XPRESS ETUP A page appears presenting the two available routing modes. NAT-enabled routing is enabled by default. IP51 Installation Guide...
  • Page 25 Setting Up the IP51 Click The IP Configuration page, shown appears. Use the entries you recorded in Table 1-1 on page 15 to fill out the fields in the IP Configuration page. IP51 Installation Guide...
  • Page 26 Chapter 2: Setting Up the Hardware Click The IP51 completes its setup and the Configuration Complete page appears. To configure more computers on the network to work with the IP51, follow the instructions in “Adding Other Computers” on page 32. IP51 Installation Guide...
  • Page 27: Using Traditional Routing

    Setting Up the IP51 Using Traditional Routing In the IP51 Setup Page, click XPRESS ETUP A page appears presenting the two available routing modes. NAT-enabled Routing is enabled by default. IP51 Installation Guide...
  • Page 28 Use the entries you recorded in Table 1-1 on page 15 to fill out the fields in the IP Configuration page. If you want to activate the IP51’s DHCP server, click the Enable DHCP Server radio button. If you left the DHCP server disabled (the default), follow the steps in “Completing the Traditional Routing Setup with the DHCP Server...
  • Page 29 Setting Up the IP51 Follow the instructions that appear on the displayed page. To configure more computers on the network to work with the IP51, follow the instructions in “Using Traditional Routing” on page 34. Completing the Traditional Routing Setup with the DHCP Server...
  • Page 30: Change The Default Password

    IP51 using the command-line interface. See the CD that came with the IP51 for more information about the command-line interface.) If you forget the IP51’s password, you can reset it to the default by pressing the restore defaults button (see Figure 2-2 on page 23).
  • Page 31: Setting The Time

    Determining the GMT Offset Before you set the GMT offset, you should first determine the offset of the location where the IP51 is installed. To do so, follow these steps. On the Windows Start menu, click Settings > Control Panel.
  • Page 32: Adding Other Computers

    With the IP51 setup complete, you are ready to connect other computers and configure them to work with the IP51. Before you configure each computer, connect it to the IP51 as shown in Figure 2-1 on page 20. Also verify that the power to the IP51 is on.
  • Page 33: Using Nat-Enabled Routing

    Using NAT-Enabled Routing Choose the appropriate following procedure depending on whether the IP51’s DHCP server is enabled or disabled. If the DHCP Server is Enabled In this case, you must configure each computer so that it is assigned an IP address dynamically by the IP51.
  • Page 34: Using Traditional Routing

    Table 1-1. Enter the subnet mask that you recorded in the table. Click the Gateway tab and enter the LAN IP address of the IP51. Click the DNS Configuration tab and choose Enable DNS. Then enter the addresses you recorded in the table.
  • Page 35 Table 1-1. Enter the subnet mask that you recorded in the table. Click the Gateway tab and enter the LAN IP address of the IP51. Click the DNS Configuration tab and choose Enable DNS. Then enter the addresses you recorded in the table.
  • Page 36: Adding Switches Or Hubs

    IP51. If you use a switch, you may need to use a crossover cable or straight through cable, depending on the switch. You can connect a switch or hub to any of the LAN ports of the IP51. Power Supply...
  • Page 37: Choosing A Check Point License

    Choosing a Check Point License CHAPTER 3 To protect your network with an IP51, you need to use a Check Point management server to configure and manage the IP51. Before you can do so, you need to properly license the IP51 and the management server. This chapter provides information to help you choose an appropriate Check Point license.
  • Page 38: Using An Existing Server To Manage

    Using a Remote License. Choose the remote management option if you have an existing Check Point management server that will manage the IP51 (whether it is on the same network as the IP51 or not). Follow the instructions in Chapter 4, “Licensing an Existing (“Remote”) Server”...
  • Page 39: Licensing An Existing ("Remote") Server

    IP51 over a WAN. Remember that an existing server could also be located on the same LAN as the IP51. If you install the IP51 and management server on the same LAN , make sure that the server’s TCP/IP settings include a valid DNS server.
  • Page 40: What You Need

    Management Server Figure 4-1. Existing (“Remote”) Server Connected Over a WAN What You Need • Static public IP address for the IP51 • Existing Check Point management server (4.1 or later) with license installed (SP3 or later) • SmallOffice Firewall-Only certificate key •...
  • Page 41: Registering The License

    Registering the License Registering the License Before you begin, make sure your computer has an active connection to the Internet. Open a Web browser and enter the following URL: http://license.checkpoint.com/ The following window appears. IP51 Installation Guide...
  • Page 42 Chapter 4: Licensing an Existing (“Remote”) Server Click Licensing Center to begin the registration process. The License Request Form appears. IP51 Installation Guide...
  • Page 43 The name of the vendor you bought the license from (if any). • The certificate key that was given to you by the vendor. When you have finished filling out the form, click Step 2 at the bottom left. The User Information window appears. IP51 Installation Guide...
  • Page 44 Chapter 4: Licensing an Existing (“Remote”) Server IP51 Installation Guide...
  • Page 45 When you finish filling out the form, click Step 3 at the bottom left. The Platform and Installation window appears. Select the following options: • Remotely, through an Enterprise Management Console, Provider- 1 or Site Manager IP51 Installation Guide...
  • Page 46 Point management server. If you do not have an existing Check Point management server, you must select “Locally from my office” and follow the procedures in Chapter 6, “Licensing a Free (“Local”) SmallOffice Management Server” and Chapter 7, “Configuring the IP51 and Free SmallOffice Management Server.” •...
  • Page 47 Registering the License If the license looks like cpvp-vso-50-des-module-v41 it is a VPN license. This license does not work with the IP51. Call the company you purchased the license from and request a firewall-only license instead. The license you purchase must be a SmallOffice firewall-only license.
  • Page 48 Chapter 4: Licensing an Existing (“Remote”) Server When you finish filling out the form, click Step 5. The Confirmation window appears. IP51 Installation Guide...
  • Page 49 If you need to change anything, click Back in your browser and repeat step 9 through step 11. • If all the information is correct, click Generate License. The Results window appears. Print the Results window for your records. The license will also be emailed to you. IP51 Installation Guide...
  • Page 50 Select a location you will remember and click Save. You have now successfully obtained your Check Point license. In Chapter 5, you will use this license to configure your existing Check Point management server to work with the Nokia IP51. IP51 Installation Guide...
  • Page 51: Configuring The Ip51 And Existing Management Server

    F5 or Refresh on your browser to ensure that you are looking at current information. If you install the IP51 on the same LAN as its Check Point NOTE: management server, make sure that the server’s TCP/IP settings include a valid DNS server.
  • Page 52: Configuring The Ip51

    Server IP Address field. This is the address of the interface that has a network (LAN or WAN) connection to the IP51. (For the server shown in Figure 4-1 on page 40, you would enter 209.221.75.214.) IP51 Installation Guide...
  • Page 53 Click Check Point Firewall Configuration. The Enable Check Point Firewall Configuration window appears. Click Enable. The IP51 goes through a countdown and then restarts itself. If you disable the firewall, you must reenter your password before NOTE: you reenable the firewall. Do this by performing step 1 through step 12.
  • Page 54: Configuring The Management Server

    In this example the IP51 is named IP51 and has an IP address of 209.221.75.213. You can choose any name you want for the IP51. NOTE: You do not have to supply a name for the IP51. If you do not, it is identified by its IP address. Save the file.
  • Page 55: Configuring The Existing Management Software

    Configuring the Existing Management Software Now you need to configure the existing Check Point management server to work with the IP51. Start the Check Point client configuration program (the default path to the program is Start> Programs> Check Point Management Clients>...
  • Page 56 Chapter 5: Configuring the IP51 and Existing Management Server On the Licenses tab, click Add to install the Module License for the IP51. The Add License dialog box appears. Use one of the following methods to add your license: •...
  • Page 57 The Licenses tab appears again. Click OK to continue. Choose the Remote Modules tab and enter the name of the IP51 (the name that you added to the hosts file) or the IP address (if you chose not to name the appliance in the hosts file) in the hostname field.
  • Page 58: Creating A Remote Module

    Chapter 5: Configuring the IP51 and Existing Management Server The Check Point Configuration Tool appears. Creating a Remote Module Use the following procedure to create a remote module. Click the Remote Modules tab. IP51 Installation Guide...
  • Page 59 Configuring the Management Server Click Add. The Add Module dialog box appears. In the Password and Confirm Password fields, enter the password that you entered in the IP51’s Server Configuration page (see step 7 on page 53). IP51 Installation Guide...
  • Page 60 Chapter 5: Configuring the IP51 and Existing Management Server Click OK. The IP51 name or IP address appears in the window on the right, as shown in the following example. Click OK. The resulting pop-up window asks you if you want to restart the firewall.
  • Page 61: Creating The Ip51 Object

    Configuring the Management Server Creating the IP51 Object The next task is to create an object for the IP51. Start the Check Point Policy Editor (the default location for this program is Start> Programs> Check Point Management Clients> Policy Editor 4.1).
  • Page 62 Chapter 5: Configuring the IP51 and Existing Management Server Click Network Objects. The Network Objects dialog box appears. IP51 Installation Guide...
  • Page 63 In the Name field, enter the name you added to the hosts file in step 2 on page 54. If you did not edit the hosts file, create a name for the IP51 and enter it here. Click Get Address.
  • Page 64 Click the Interfaces tab. Click Get. You should see a dialog box that indicates that the server is attempting to get interfaces. The server should then display the WAN and LAN interfaces of the IP51 in the Interfaces tab. IP51 Installation Guide...
  • Page 65 If the Policy Editor fails to locate the interfaces, use these NOTE: troubleshooting steps: 1. Check the connection to the IP51. 2. If you previously disabled and reenabled the firewall without reentering the password, disable the firewall again, reenter the password (see page 52), and reenable the firewall.
  • Page 66 Chapter 5: Configuring the IP51 and Existing Management Server Click OK. The object is now listed in the Network Objects dialog box. Click Close. IP51 Installation Guide...
  • Page 67: Pushing A Policy To The Ip51

    Pushing a Policy to the IP51 Pushing a Policy to the IP51 You are ready to push a security policy to the IP51. If you do not want to push a fully configured policy at this point, you should still create a test policy and push it to the IP51 to verify that everything is working properly.
  • Page 68 Chapter 5: Configuring the IP51 and Existing Management Server The Select Target dialog box appears. Choose the IP51 object you created. Click OK. IP51 Installation Guide...
  • Page 69 Right click the Gateways icon and choose Delete. Delete the default Gateways icon because you want to install this rule only on the IP51. You should verify the rules before you install the policy to the IP51: click Policy select Verify click OK A window appears that indicates the rules were verified.
  • Page 70 Chapter 5: Configuring the IP51 and Existing Management Server Click Install. The Install Policy dialog box appears. Make sure the Security check box next to the IP51 object is checked. Uncheck any other listed firewall objects so that the policy is not pushed to them.
  • Page 71: Verifying The Setup

    Click OK. You see a window similar to the following one. Click Close. This completes the process of pushing a policy to the IP51. Verifying the Setup To verify that the management server and IP51 are communicating properly, perform these steps: In your browser, open the IP51 Setup page.
  • Page 72 This window should list the FireWall-1 management server and its IP address. You have verified that the IP51 is communicating with the management server and has received a policy. If the policy you pushed is a test policy, you should now push an appropriately configured policy to the IP51.
  • Page 73: Licensing A Free ("Local") Smalloffice Management Server

    IP51. After you complete these procedures, go to Chapter 7, “Configuring the IP51 and Free SmallOffice Management Server.” Refer to Figure 6-1 as you read the procedures in this chapter and Chapter 7.
  • Page 74: What You Need

    What You Need • Windows NT Server (4.0 or later) computer • Static public IP address for the IP51 (and server computer if you are connecting it to the network for the first time) • SmallOffice Firewall-Only certificate key •...
  • Page 75: Registering The License

    Before you begin, make sure your computer has an active connection to the Internet. Open a Web browser and enter the following URL: http://license.checkpoint.com/ The Licensing Center window appears. Click Licensing Center to begin the registration process. The License Request Form appears. IP51 Installation Guide...
  • Page 76 • A valid email address. Check Point will use this address to verify who you are and send you updates as well as the license. • Enter your email address again to confirm it. IP51 Installation Guide...
  • Page 77 (if any). • the certificate key that was provided to you by the vendor. When you finish filling out the form, click Step 2 at the bottom left. The User Information window appears. IP51 Installation Guide...
  • Page 78 Chapter 6: Licensing a Free (“Local”) SmallOffice Management Server IP51 Installation Guide...
  • Page 79 If you are registered with Check Point, your information appears in the User Information window automatically. When you finish filling out the form, click Step 3 at the bottom left. The Platform and Installation window appears. IP51 Installation Guide...
  • Page 80 NOTE: Point management server. If you do have an existing Check Point management server to manage the IP51, you must select “Remotely, via an Enterprise Management Console, Provider-1 or Site Manager” and follow the procedures in Chapter 4, “Licensing an Existing (“Remote”) Server”...
  • Page 81 Registering the License When you finish filling out the form, click Step 4. The Host Information window appears. IP51 Installation Guide...
  • Page 82 Chapter 6: Licensing a Free (“Local”) SmallOffice Management Server If the license looks like cpvp-vso-50-des-module-v41 it is a VPN license. This license does not work with the IP51. Call the company you purchased the license from and request a firewall-only license instead.
  • Page 83 IP addresses must match the IP address of the server. • If you need to change any information, click the Back button in your browser and repeat step 8 through step 10. • If all the information is correct, click Generate License. IP51 Installation Guide...
  • Page 84 Chapter 6: Licensing a Free (“Local”) SmallOffice Management Server The Results window appears. Print the Results window for your records. The license will also be emailed to you. IP51 Installation Guide...
  • Page 85 Select a location you will remember and click Save. You have now successfully obtained your Check Point license. In Chapter 7, you will use this license to configure your Check Point management server to work with the Nokia IP51. IP51 Installation Guide...
  • Page 86 Chapter 6: Licensing a Free (“Local”) SmallOffice Management Server IP51 Installation Guide...
  • Page 87: Configuring The Ip51 And Free Smalloffice Management Server

    SmallOffice Management Server In this chapter you complete the protection of your network. You configure the IP51 and your Check Point management server to work together and then use the management server to push a security policy to the IP51.
  • Page 88: Configuring The Ip51

    Enter the appropriate private IP address of the Check Point SmallOffice management server in the Server IP Address field. This is the address of the server interface that has a network connection to the IP51. (In Figure 6-1 on page 73, this address is 192.168.1.2.) IP51 Installation Guide...
  • Page 89 Click Check Point Firewall Configuration. The Enable Check Point Firewall Configuration window appears. Click Enable. The IP51 goes through a countdown and then restarts itself. If you disable the firewall, you must reenter your password before NOTE: you reenable the firewall. Do this by performing step 1 through step 12 (When you repeat step 7, reenter the original password.)
  • Page 90: Configuring The Nt Server

    In this example the IP51 is named IP51 and has an IP address of 192.168.1.1. You can choose any name you want for the IP51. NOTE: You do not have to supply a name for the IP51. If you do not, it is identified by its IP address. Save the file.
  • Page 91: Installing And Configuring The Free Management

    The file name might not be exactly the same as the one shown NOTE: above if you are accessing a later version of the software. The Select Components window appears. Click Complete - All components will be installed (Recommended). IP51 Installation Guide...
  • Page 92 Chapter 7: Configuring the IP51 and Free SmallOffice Management Server Click Next to install the SmallOffice Management Server software to the default folder Click Next to install the SmallOffice graphical user interface (GUI) software to the default folder The Licenses window appears.
  • Page 93 Installing and Configuring the Free Management Software Click Add... to add the license for the free SmallOffice Management Server software. The Add License dialog box appears. IP51 Installation Guide...
  • Page 94 Chapter 7: Configuring the IP51 and Free SmallOffice Management Server Click Get Validation Code! A license should appear under New Licenses (as it does in the following figure). Click Add... to add the module license for the IP51 appliance. The Add License dialog box reappears. IP51 Installation Guide...
  • Page 95 • if you have a .lic file, click Fetch From File and navigate to the file • copy the license string from the file you downloaded (see page 85) and choose Paste License IP51 Installation Guide...
  • Page 96 Chapter 7: Configuring the IP51 and Free SmallOffice Management Server Click Get Validation Code! A code should appear (as it does in the previous dialog box). Now both licenses should appear in the New Licenses field. IP51 Installation Guide...
  • Page 97: Creating An Administrator

    Installing and Configuring the Free Management Software Click Next. The Administrators window appears. Creating an Administrator Use the following procedure to add an administrator. Starting at the Administrators window (which was displayed at the end of the preceding procedure), click Add... IP51 Installation Guide...
  • Page 98 Chapter 7: Configuring the IP51 and Free SmallOffice Management Server The Add Administrator window appears. Enter an administrator name in the Administrator Name field. Enter a password in the Password and Confirm Password fields. Be sure to remember this password.
  • Page 99 Click Next. The IP Address window appears. Enter the address of the server interface that has a network connection to the IP51. (In Figure 6-1 on page 73, this address is 192.168.1.2.) Click Next. The GUI client window appears. IP51 Installation Guide...
  • Page 100: Creating A Remote Module

    The Remote Modules window appears after you complete the previous procedure. Enter the name of the IP51 (the name you added to the hosts file, or the IP address if you chose not to name the IP51 in the hosts file) in the hostname field. IP51 Installation Guide...
  • Page 101 Installing and Configuring the Free Management Software Click Add. Click Next. The Add Module window appears. IP51 Installation Guide...
  • Page 102 Chapter 7: Configuring the IP51 and Free SmallOffice Management Server In the Password and Confirm Password fields, enter the password that you entered in the Check Point Server Configuration window (see step 7 on page 89). IP51 Installation Guide...
  • Page 103 Installing and Configuring the Free Management Software Click OK. The IP51 enforcement module appears in the window on the right, as shown in the following example. Click Next. When the next window appears, type random characters until you are prompted to stop.
  • Page 104: Creating The Ip51 Object

    Be sure you restart the NT server before you proceed. Creating the IP51 Object The next task is to create a firewall object for the IP51. Start the Check Point Policy Editor (the default location for this program is Start> Programs> Check Point Management Clients>...
  • Page 105 Installing and Configuring the Free Management Software Click Network Objects. The Network Objects dialog box appears. IP51 Installation Guide...
  • Page 106 In the Name field, enter the name you added to the hosts file in step 2 on page 90. If you did not edit the hosts file, create a name for the IP51 and enter it here. Click Get Address.
  • Page 107 Click the Interfaces tab Click Get. You should see a dialog box that indicates that the server is attempting to get interfaces. The server should then display the WAN and LAN interfaces of the IP51 in the Interfaces tab. IP51 Installation Guide...
  • Page 108 Chapter 7: Configuring the IP51 and Free SmallOffice Management Server NOTE: If the Policy Editor fails to locate the interfaces, use these troubleshooting steps: 1. Check the connection to the IP51. 2. If you previously disabled and reenabled the firewall without reentering the password, disable the firewall again, reenter the password (see page 88), and reenable the firewall.
  • Page 109 Installing and Configuring the Free Management Software Click OK to finish the object. The object is listed in the Network Objects dialog box. Click Close. IP51 Installation Guide...
  • Page 110: Pushing A Policy To The Ip51

    Chapter 7: Configuring the IP51 and Free SmallOffice Management Server Pushing a Policy to the IP51 You are ready to push a security policy to the IP51. If you do not want to push a fully configured policy at this point, you should still create a test policy and push it to the IP51 to verify that everything is working properly.
  • Page 111 Pushing a Policy to the IP51 The Select Target dialog box appears. Choose the IP51 object you created. Click OK. IP51 Installation Guide...
  • Page 112 Right click the Gateways icon and choose Delete. Delete the default Gateways icon because you want to install this rule only on the IP51. You should verify the rules before you install the policy to the IP51: click Policy select Verify click OK A window appears that indicates the rules were verified.
  • Page 113 Pushing a Policy to the IP51 Click Install. The Install Policy dialog box appears. Make sure the Security check box next to the IP51 object is checked. Uncheck any other listed firewall objects so that the policy is not pushed to them.
  • Page 114: Verifying The Setup

    Click OK. You see a window similar to the following one. Click Close. This completes the process of pushing a policy to the IP51. Verifying the Setup To verify that the management server and IP51 are communicating properly, perform these steps: In your browser, open the IP51 Setup page.
  • Page 115 This window should list the FireWall-1 management server and its IP address. You have verified that the IP51 is communicating with the management server and has received a policy. If the policy you pushed is a test policy, you should now push an appropriately configured policy to the IP51.
  • Page 116 Chapter 7: Configuring the IP51 and Free SmallOffice Management Server IP51 Installation Guide...
  • Page 117: Appendix A Warranty And Software License

    Software is used solely on behalf of and for the benefit of a single client on the single piece of equipment provided by Nokia. An MSP may discontinue use of the Software on behalf of one client and use the Software to provide managed services to another single client.
  • Page 118 Software error. Furthermore, the above warranty does not apply to any portion of the product supplied by a third party. In no event does Nokia warrant that the Software is error-free or that the Customer will be able to operate it without problems or service interruptions.
  • Page 119 Upon termination, Customer shall cease all use of the Software and shall destroy or return to Nokia the original(s) and all copies of the Software and documentation made or furnished hereunder. Customer may terminate the License at any time by destroying all copies of the Software and documentation.
  • Page 120 Appendix A: Warranty and Software License IP51 Installation Guide...
  • Page 121: Appendix B Compliance Information

    Nokia Corporation Manufacturer’s address: 313 Fairchild Drive Mountain View, CA 94043-2215 declares that the product: Product name: SOS510 Model number: IP51 Product options: Serial number: 1 to 100,000 Date first applied: 2001 conforms to the following standards: IP51 Installation Guide...
  • Page 122: Compliance Statement

    This hardware complies with the following standards: Emissions FCC Part 15, Subpart B, Class B US and Canada EN55022A: (CISPR 22, Class B) European Community (CE) EN6100-3-2 European Community (CE) EN6100-3-3 European Community (CE) Immunity EN50024: European Community (CE) EN61000-4-2 EN61000-4-3 EN61000-4-4 EN61000-4-5 IP51 Installation Guide...
  • Page 123: Fcc Notice (Us)

    The SOS55X has been tested and complies with the limits for a class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio IP51 Installation Guide...
  • Page 124 Operation of this equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference in the user’s expense. CHANGES OR MODIFICATIONS NOT EXPRESSLY APPROVED BY Nokia IP COULD VOID THE USER’S AUTHORITY TO OPERATE THE EQUIPMENT.
  • Page 125: Index

    17 choosing a 37 Check Point management server 37 documentation IP51, for the 10 multiple IP51 appliances, using to manage 38 version requirements 38 downloading software local management servers, for 85 Check Point Policy Editor 61, 104 remote management servers, for 50...
  • Page 126 Windows, for 12 Check Point Firewall configuration, and 89 resetting factory configuration defaults 23 configuring 87 downloading software for 85 security policies license registration for 75 pushing to the IP51 67, 110 licensing 73 setting up IP51 Installation Guide...
  • Page 127 Windows computers 21 setup page 22 setup verification 71, 114 switches adding 36 TCP/IP settings IP51, for the 21 time setting 31 Traditional routing Configuration Complete page for 28 installation, gathering information for the 15 IP configuration page for 28...
  • Page 128 Index IP51 Installation Guide...