Page 3
For third party independent certification of Check Point products, see the Check Point Certifications page. Check Point Quantum Force 3900 Appliances Getting Started Guide For more about this release, see the home page. Latest Version of this Document in English...
Appliance Air Vents Configuring 3900 Appliances Initial Configuration Starting the Appliance Creating the Network Object Advanced Configuration Connecting to the 3900 Appliances CLI Configure the Appliance with Zero Touch 3900 Appliances Hardware Front Panel Quantum Force 3900 Appliances Getting Started Guide | 4...
Page 5
Installing the Power Cable Restraint Strip in 3970 / 3980 Appliances Optional Hardware Components Switch Ports Restoring Factory Defaults Restoring from Gaia Portal Restoring from the Boot Menu Restoring from Gaia Clish Registration and Support Registration Support Where To From Here? Quantum Force 3900 Appliances Getting Started Guide | 5...
Do not operate the processor without a thermal solution. Damage to the processor can occur in seconds. Class 1 laser product warning - A totally enclosed laser system containing a class 1 laser. Quantum Force 3900 Appliances Getting Started Guide | 6...
Page 7
Handling the cord on this product will expose you to lead, a chemical known to the State of California to cause cancer, and birth defects or other reproductive harm. Wash hands after handling. Caution Quantum Force 3900 Appliances Getting Started Guide | 7...
Page 8
For more information about where you can drop off your waste equipment for recycling, please contact your local city office or your household waste disposal service. Quantum Force 3900 Appliances Getting Started Guide | 8...
Débrancher l'alimentation de la carte système de sa source électrique avant de connecter ou déconnecter des câbles ou d'installer ou retirer des composants. À défaut, les risques sont d'endommager l'équipement et de causer des blessures corporelles. Quantum Force 3900 Appliances Getting Started Guide | 9...
Page 10
California Safe Drinking Water and Toxic Enforcement Act of 1986 du California Health & Safety Code s. 25249.5, et seq. (« Proposition 65 »), qui sont « connus par l'état pour être cancérigène ou être toxiques pour la reproduction » (voir http://www.calepa.ca.gov). Quantum Force 3900 Appliances Getting Started Guide | 10...
Page 11
Pour obtenir plus d'informations sur les lieux où déposer vos équipements mis au rebut, veuillez contacter votre municipalité ou le service de gestion des déchets. Quantum Force 3900 Appliances Getting Started Guide | 11...
Trennen Sie die Stromversorgung der Systemplatine von der entsprechenden Stromquelle, bevor Sie Kabel ein- bzw. ausstecken oder Komponenten der Systemplatine entfernen. Wenn Sie dies nicht befolgen, können Personen verletzt und die Anlage beschädigt werden. Quantum Force 3900 Appliances Getting Started Guide | 12...
Page 13
Chemikalien, die vom US-Bundesstaat Kalifornien gemäß den Anforderungen des „California Safe Drinking Water and Toxic Enforcement Act“ von 1986 (California Health & Safety Code s. 25249.5 ff., „Proposition 65“) als mögliche Ursache für Krebs oder eine fortpflanzungsgefährdende Toxizität eingestuft werden (siehe http://www.calepa.ca.gov) Quantum Force 3900 Appliances Getting Started Guide | 13...
Page 14
Gesundheit des Menschen und der Umwelt darstellt. Weitere Informationen darüber, wo Sie alte Elektrogeräte zum Recyceln abgeben können, erhalten Sie bei den örtlichen Behörden, den Wertstoffhöfen oder dort, wo Sie das Gerät erworben haben. Quantum Force 3900 Appliances Getting Started Guide | 14...
IEC 61000-4-6 Ed. 5.0:2023 IEC 61000-4-8 Ed. 2.0:2009 IEC 61000-4-11 Ed. 3.0:2020 47 CFR FCC Part 15 Subpart B ICES-003 Issue 7 : October 2020 ANSI C63.4 : 2014 VCCI-CISPR 32 : 2017 Quantum Force 3900 Appliances Getting Started Guide | 17...
Page 18
No. 12, Gong 7th Rd., Linkou District, New Taipei City Consultant Co., Ltd. 24450, Taiwan Chinese Taipei DEKRA Testing and No. 85, Wenlin St., Linkou Dist., New Taipei City, 244017, Certification Co., Ltd. Taiwan. Quantum Force 3900 Appliances Getting Started Guide | 18...
IEC 61000-4-6 Ed. 5.0:2023 IEC 61000-4-8 Ed. 2.0:2009 IEC 61000-4-11 Ed. 3.0:2020 47 CFR FCC Part 15 Subpart B ICES-003 Issue 7 : October 2020 ANSI C63.4 : 2014 VCCI-CISPR 32 : 2017 Quantum Force 3900 Appliances Getting Started Guide | 19...
Page 20
This device has been assessed to meet the essential requirements and other relevant provisions. CE – Low Voltage Directive (LVD) Compliance Statement Quantum Force 3900 Appliances Getting Started Guide | 20...
Page 21
This Class B digital apparatus complies with Canadian CAN ICES-003(B)/NMB-003(B). Cet appareil numérique de la classe B est conforme à la norme CAN ICES-003(B)/NMB-003 (B) du Canada. VCCI Class B Compliance Statement (Japan) Quantum Force 3900 Appliances Getting Started Guide | 21...
Page 22
If this happens, the user may need to take corrective actions, such as repositioning the device or changing its settings to reduce interference. Quantum Force 3900 Appliances Getting Started Guide | 22...
SandBlast Prevention suite. Security Appliance Form Factor In this document Quantum Force 3920 Appliance Desktop 3920 Quantum Force 3950 Appliance Desktop 3950 Quantum Force 3970 Appliance 3970 Quantum Force 3980 Appliance 3980 Quantum Force 3900 Appliances Getting Started Guide | 23...
Rack screws and nuts (4 screws and 4 nuts to attach the appliance to the rack posts) Power cable restraints Documentation Welcome to Check Point QR Page (with Safety instructions on the other side of the page) Quantum Force 3900 Appliances Getting Started Guide | 24...
Security Policy (the Security Management Server and the Security Gateway) are installed on the same machine. Centrally Managed Deployment: When the Security Gateway and the Security Management Server are installed on separate machines. Quantum Force 3900 Appliances Getting Started Guide | 25...
4. Attach the 2 screws in the accessory kit to the wall. Make sure there is 2 - 3 mm space between the screw head and the wall. 5. Mount the appliance on the screws. Quantum Force 3900 Appliances Getting Started Guide | 26...
To install the appliance in the rack: 1. Secure the ear mount brackets to the rack post with the supplied rack screws and nuts. 2. Follow your rack mount instructions to complete the installation. Quantum Force 3900 Appliances Getting Started Guide | 27...
The appliance and rack mountings have been tested in extreme conditions and do not block air flow to the appliance. The air flow in 3900 appliances (appliance shown is 3920): Quantum Force 3900 Appliances Getting Started Guide | 29...
The appliance turns on. To start the 3950 / 3970 / 3980 appliance: Connect the power cables to the power supply inlets in the rear panel and press the power switch. The appliance turns on. Quantum Force 3900 Appliances Getting Started Guide | 30...
4. Establish Secure Internal Communication (SIC) between the Security Gateway and the Security Management Server. Enter the activation key you used in the First Time Configuration Wizard. 5. Configure the topology. 6. Configure and install the Security Policy. Quantum Force 3900 Appliances Getting Started Guide | 31...
Important - During the initial setup process, if the appliance must receive an IP Address from a DHCP server, you must connect the cable to this Ethernet port: 3920 - Port #1 (eth1) 3950 - Port #3 (eth3) 3970 / 3980 - Port #11 (eth11) Quantum Force 3900 Appliances Getting Started Guide | 32...
Green - All power supplies are functioning. Alert Off - No faults were detected. Blinking red - System fault was detected. System Off - System power is off. power On (Green) - System power is on. Quantum Force 3900 Appliances Getting Started Guide | 33...
Page 34
In the Gaia OS on the appliance, this interface is assigned RJ45 port the name eth11. Console RJ45 For a serial connection to the appliance. port "Connecting to the 3900 Appliances CLI" on page 32 Quantum Force 3900 Appliances Getting Started Guide | 34...
Page 35
In the Gaia OS on the appliance, this interface is assigned port the name Mgmt. USB port USB 3.0 port. Console port USB Type-C console port for a serial connection to the appliance. Quantum Force 3900 Appliances Getting Started Guide | 35...
Page 36
In the Gaia OS on the appliance, this interface is assigned the name Sync. Console RJ45 port For a serial connection to the appliance. "Connecting to the 3900 Appliances CLI" on page 32 Quantum Force 3900 Appliances Getting Started Guide | 36...
Page 37
Location LED and Location Off - Location beacon button is turned off. Blinking blue: Location beacon is turned on in Gaia Portal or with the Location button. During Zero Touch configuration. Quantum Force 3900 Appliances Getting Started Guide | 37...
Page 38
Important - For Zero Touch, you must use port #11 (eth11). Management 1 For a connection to a remote management computer. GbE RJ45 port In the Gaia OS on the appliance, this interface is assigned the name Mgmt. Quantum Force 3900 Appliances Getting Started Guide | 38...
Page 39
Service tag A slide-out card that identifies the appliance and shows its serial number and MAC address. It also contains a QR code that you can scan to view documentation and on-board the appliance. Quantum Force 3900 Appliances Getting Started Guide | 39...
Management 1 For an Ethernet connection to a remote management GbE RJ45 port computer. In the Gaia OS on the appliance, this interface is assigned the name Mgmt. Quantum Force 3900 Appliances Getting Started Guide | 40...
Page 41
When the appliance is turned on, pressing and releasing the switch will start an orderly shutdown process. Alternatively, holding the switch for 4 seconds will force a machine shut down. Grounding To connect the appliance to the ground. screw Quantum Force 3900 Appliances Getting Started Guide | 41...
Page 42
4 seconds will force a machine shut down. Fixed cooling Numbered from left to right - 1 and 2. fans Metal Used to connect the grounding lug. grounding plate Quantum Force 3900 Appliances Getting Started Guide | 42...
A wire crimping tool suitable for the grounding lug type. A screwdriver suitable for the grounding screws. Prerequisites: 1. Insert the grounding wire in the lug (connector). 2. Use the crimping tool to crimp the lug onto the grounding wire. Quantum Force 3900 Appliances Getting Started Guide | 43...
Procedure to install the power cable restraint strip on the 3970 / 3980 appliance In 3970 / 3980 Appliances, the shipping carton contains two restraint strips. You can use these restraint strips to prevent accidental removal of the power cable. Quantum Force 3900 Appliances Getting Started Guide | 44...
Page 45
5. Connect the power cable to the power supply inlet. 6. Pull the restraint tab to the side to move the cable loop on the restraint strip. 7. Move the cable loop until you can wrap it around the power cable. Quantum Force 3900 Appliances Getting Started Guide | 45...
For more information about installing these hardware components, see sk183199. Unless directed to do so by Check Point technical support, you are prohibited by warranty and support agreements from replacing any internal parts in the appliance. Quantum Force 3900 Appliances Getting Started Guide | 46...
In the Gaia OS, the internal Master Port appears as the interface called "eth- switch" in the CPView tool and the Expert mode commands "ifconfig", "ethtool" and others. Gaia Portal and Gaia Clish do not show these internal interfaces "eth-cpuport" and "eth-switch". Quantum Force 3900 Appliances Getting Started Guide | 47...
Page 48
6. Based on the Firewall decision, the subsequent packets of the connection go through the applicable path (Fast, Medium, or Slow). 7. If the packet is allowed, SecureXL adds the applicable DSA tag to the packet and forwards the packet to the corresponding appliance port. Quantum Force 3900 Appliances Getting Started Guide | 48...
3. In the left navigation tree, click Maintenance > Factory Defaults. The Factory Defaults window opens. The image installed on the appliance is shown. 4. Click Apply. The appliance reboots and installs the selected version from scratch. Quantum Force 3900 Appliances Getting Started Guide | 49...
Boot menu. 9. From the Boot menu, select the relevant Reset to factory defaults image. 10. Press Enter. The appliance initializes and status messages are shown in the terminal emulation program. Quantum Force 3900 Appliances Getting Started Guide | 50...
1. Connect to the command line on the appliance. 2. Log in to Gaia Clish. 3. Run: set fcd revert<SPACE><TAB> set fcd revert <Name of Image> 4. Follow the instructions on the screen. 5. Reboot <reboot> Quantum Force 3900 Appliances Getting Started Guide | 51...
For additional technical information about Check Point products, consult the Check Point Support Center Where To From Here? You have the basics to get started. The next step is to get more advanced knowledge of your Check Point software. Quantum Force 3900 Appliances Getting Started Guide | 52...
Need help?
Do you have a question about the FORCE 3900 and is the answer not in the manual?
Questions and answers