Table of Contents
Advertisement
Reach My Device
Reach My Device lets you remotely connect to the appliance from the Internet so that you can use
the WebUI or CLI when necessary. This is done by tunneling the administrative UI or CLI
connections through a Check Point Cloud Service. Such configuration is very useful in instances
where the appliance is behind a NAT device or firewall, and cannot be reached directly. In addition,
the feature makes it easier to access an appliance with a dynamically assigned IP address.
Item Description
1
Register the Check Point Appliance to the Check Point Cloud Service - When you first
enter the Device > DDNS & Device Access page you see a link to register the appliance.
Use the procedure below to register the appliance to the service.
2
When registration is complete - An outgoing tunnel to the Check Point Cloud Service is
established with the appliance's IP address.
In the WebUI, the Device > DDNS & Device Access page shows:
•
Validation token - A token you enter to make sure the host name is valid. This token
verifies that an existing name belongs to this appliance owner.
•
Web link - Use this URL in a browser to remotely access the appliance.
For example: https://mygateway-web.smbrelay.checkpoint.com
When the login page shows, enter the applicable user name and password.
•
Shell link - Use this URL in a browser to open an SSH connection to the appliance to
use CLI commands.
For example: https://mygateway-shell.smbrelay.checkpoint.com
Enter the administrator credentials.
3
When an administrator requires access to the WebUI or CLI, the applicable URL is entered
in a browser and gets to the Web Service in the cloud.
4
The administrator gains access to the appliance WebUI or CLI through a pipe established
by the Check Point Cloud Service to the appliance.
To register to allow connections to the appliance when it is unreachable from the
Internet:
1. Click Register.
The Reach My Device window opens.
2. In Host name, use the default host name or enter a name for this Check Point Appliance to
enable remote access to it.
3. If the host name has already been defined, select Register with an existing home name and
enter the Validation token of the gateway.
4. Click Apply.
The validation token, web link, and shell link are shown on the DDNS & Appliance Access page.
5. Go to Device > Administrator Access. Configure Internet as a source for administrator access
and set specified IP addresses.
Using System Tools
See Using System Tools (on page 52).
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.75
Appliance Configuration
|
90
Advertisement
Table of Contents
