Configuring A Configuration Script; Configuring Profile Settings - Infinity Check Point L-71WD Administration Manual

Configuring a Configuration Script

To configure a configuration script on a Provisioning Profile:
1. Open the Security Gateway Profile window, and select the Configuration Script tab.
2. Select Manage Configuration Script centrally from this application.
3. Click Advanced.
The Profile Settings window opens.
4. Select one of these override profile settings
• Allowed
• Denied
• Mandatory
5. In Configuration Script, enter a script to run on the Small Office Appliance gateway.
6. Click Apply.

Configuring Profile Settings

For each set of configurations managed with a Provisioning Profile, you can decide which settings
local
have preference:
management or from Provisioning Profile).
To determine profile settings:
1. In the Profiles List, right-click a profile and select Edit Provisioning Profile.
2. In the Profile window, click any category tab (other than General).
3. Select management settings for gateways that reference the profile:
• Manage settings locally on the device: Each gateway that references this profile has its
own settings, configured locally (not on SmartProvisioning). These settings cannot be
overwritten by changes to the Provisioning Profile or to the SmartProvisioning gateway
object. If you select this option, the Gateway window shows: settings are defined to be
managed locally on the device.
• Manage settings centrally from this application: Each gateway that references this profile
gets its configuration for this setting from the Provisioning Profile or from the
SmartProvisioning gateway object.
4. If you selected to manage settings centrally, click Advanced.
The Profile Settings window opens.
5. Select an option for Overriding profile settings on device level is:
• Allowed - You can override the profile settings with device-local settings, or with changes
to these settings in the SmartProvisioning device window. You can also leave the profile
settings as they are.
• Denied - Each gateway takes the settings from the profile, with no option to override the
profile settings.
• Mandatory - Each gateway is managed without a Provisioning Profile.
6. Click OK.
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.75
central
(not provisioned) or
("Configuring Profile
(from SmartProvisioning individual
SmartProvisioning
Settings" on page 36):
| 36