Checkpoint 4000 Series User manual

5 July 2011
Getting Started Guide
Check Point 4000
Appliances
Models: T-120, T-160 and T-180
CP_Toxotai_GettingStartedGuide_41 1CP_Toxotai_GettingStartedGuide_41 1 05 July 2011 1:21:10 PM05 July 2011 1:21:10 PM

© 2011 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and
distributed under licensing restricting their use, copying, distribution, and decompilation. No
part of this product or related documentation may be reproduced in any form or by any means
without prior written authorization of Check Point. While every precaution has been taken in the
preparation of this book, Check Point assumes no responsibility for errors or omissions. This
publication and features described herein are subject to change without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in
subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013 and FAR 52.227-19.
TRADEMARKS:
Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our
trademarks.
Refer to the Third Party copyright notices
(http://www.checkpoint.com/3rd_party_copyright.html) for a list of relevant copyrights and third-
party licenses.
CP_Toxotai_GettingStartedGuide_42 2CP_Toxotai_GettingStartedGuide_42 2 05 July 2011 1:21:10 PM05 July 2011 1:21:10 PM

Welcome
Safety, Environmental, and Electronic Emissions Notices Page 3
Safety, Environmental, and
Electronic Emissions Notices
Read the following warnings before setting up or using the appliance.
Warning - Do not block air vents. A minimum 1/2-inch clearance is
required.
Warning - This appliance does not contain any user-serviceable parts. Do
not remove any covers or attempt to gain access to the inside of the
product. Opening the device or modifying it in any way has the risk of
personal injury and will void your warranty. The following instructions are for
trained service personnel only.
To prevent damage to any system board, it is important to handle it with care. The following
measures are generally sufficient to protect your equipment from static electricity discharge:
xWhen handling the board, to use a grounded wrist strap designed for static discharge
elimination.
xTouch a grounded metal object before removing the board from the antistatic bag.
xHandle the board by its edges only. Do not touch its components, peripheral chips, memory
modules or gold contacts.
xWhen handling processor chips or memory modules, avoid touching their pins or gold edge
fingers.
xRestore the communications appliance system board and peripherals back into the
antistatic bag when they are not in use or not installed in the chassis. Some circuitry on the
system board can continue operating even though the power is switched off.
xUnder no circumstances should the lithium battery cell used to power the real-time clock be
allowed to short. The battery cell may heat up under these conditions and present a burn
hazard.
Warning - DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY
REPLACED. REPLACE ONLY WITH SAME OR EQUIVALENT TYPE
RECOMMENDED BY THE MANUFACTURER. DISCARD USED
%$77(5,(6$&&25',1*727+(0$18)$&785(5¶6,16758&7,216
CP_Toxotai_GettingStartedGuide_43 3CP_Toxotai_GettingStartedGuide_43 3 05 July 2011 1:21:10 PM05 July 2011 1:21:10 PM

Welcome
Page 4
xDisconnect the system board power supply from its power source before you connect or
disconnect cables or install or remove any system board components. Failure to do this can
result in personnel injury or equipment damage.
xAvoid short-circuiting the lithium battery; this can cause it to superheat and cause burns if
touched.
xDo not operate the processor without a thermal solution. Damage to the processor can
occur in seconds.
xClass 1 Laser Product Warning
Rack Mount Instructions
The following or similar rack-mount instructions are included with the installation instructions:
1. Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the
operating ambient temperature of the rack environment may be greater than room ambient.
Therefore, consideration should be given to installing the equipment in an environment
compatible with the maximum ambient temperature specified by the manufacturer.
2. Reduced Air Flow - Installation of the equipment in a rack should be such that the amount
of air flow required for safe operation of the equipment is not compromised.
3. Mechanical Loading - Mounting of the equipment in the rack should be such that a
hazardous condition is not achieved due to uneven mechanical loading.
4. Circuit Overloading - Consideration should be given to the connection of the equipment to
the supply circuit and the effect that overloading of the circuits might have on over current
protection and supply wiring. Appropriate consideration of equipment nameplate ratings
should be used when addressing this concern.
5. Reliable Ear thing - Reliable ear thing of rack-mounted equipment should be maintained.
Particular attention should be given to supply connections other than direct connections to
the branch circuit (e.g. use of power strips).
For California:
Perchlorate Material - special handling may apply. See
http://www.dtsc.ca.gov/hazardouswaste/perchlorate
The foregoing notice is provided in accordance with California Code of Regulations Title 22,
Division 4.5, Chapter 33. Best Management Practices for Perchlorate Materials. This product,
part, or both may include a lithium manganese dioxide battery which contains a perchlorate
substance.
Proposition 65 Chemical
Chemicals identified by the State of California, pursuant to the requirements of the California
Safe Drinking Water and Toxic Enforcement Act of 1986, California Health & Safety Code s.
25249.5, et seq. ("Proposition 65"), that is "known to the State to cause cancer or reproductive
toxicity" (see http://www.calepa.ca.gov)
WARNING:
CP_Toxotai_GettingStartedGuide_44 4CP_Toxotai_GettingStartedGuide_44 4 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Welcome
Safety, Environmental, and Electronic Emissions Notices Page 5
Handling the cord on this product will expose you to lead, a chemical known to the State of
California to cause cancer, and birth defects or other reproductive harm. Wash hands after
handling.
Federal Communications Commission (FCC) Statement:
For a Class A digital device or peripheral
Note: This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy and, if
not installed and used in accordance with the instruction manual, may cause harmful
interference to radio communications. Operation of this equipment in a residential area is likely
to cause harmful interference in which case the user will be required to correct the interference
at his own expense.
For a Class B digital device or peripheral
NOTE: This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates,
uses and can radiate radio frequency energy and, if not installed and used in accordance with
the instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be determined by turning
the equipment off and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
xReorient or relocate the receiving antenna.
xIncrease the separation between the equipment and receiver.
xConnect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
xConsult the dealer or an experienced radio/TV technician for help.
Information to user:
The user's manual or instruction manual for an intentional or unintentional radiator shall caution
the user that changes or modifications not expressly approved by the party responsible for
compliance could void the user's authority to operate the equipment. In cases where the
manual is provided only in a form other than paper, such as on a computer disk or over the
Internet, the information required by this section may be included in the manual in that
alternative form, provided the user can reasonably be expected to have the capability to access
information in that form.
CP_Toxotai_GettingStartedGuide_45 5CP_Toxotai_GettingStartedGuide_45 5 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Welcome
Page 6
Canadian Department Compliance Statement:
This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la
classe A est conforme à la norme NMB-003 du Canada.
This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la
classe B est conforme à la norme NMB-003 du Canada.
Japan Compliance Statement:
Class A
Class B
European Union (EU) Electromagnetic Compatibility Directive
This product is herewith confirmed to comply with the requirements set out in the Council
Directive on the Approximation of the Laws of the Member States relating to Electromagnetic
Compatibility Directive (2004/108/EC). For the evaluation regarding the Electromagnetic
Compatibility (2004/108/EC)
CP_Toxotai_GettingStartedGuide_46 6CP_Toxotai_GettingStartedGuide_46 6 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Welcome
Safety, Environmental, and Electronic Emissions Notices Page 7
This product is in conformity with Low Voltage Directive 2006/95/EC, and complies with the
requirements in the Council Directive 2006/95/EC relating to electrical equipment designed for
use within certain voltage limits and the Amendment Directive 93/68/EEC.
Product Disposal
This symbol on the product or on its packaging indicates that this product must not be disposed
of with your other household waste. Instead, it is your responsibility to dispose of your waste
equipment by handing it over to a designated collection point for the recycling of waste
electrical and electronic equipment. The separate collection and recycling of your waste
equipment at the time of disposal will help to conserve natural resources and ensure that it is
recycled in a manner that protects human health and the environment. For more information
about where you can drop off your waste equipment for recycling, please contact your local city
office or your household waste disposal service.
CP_Toxotai_GettingStartedGuide_47 7CP_Toxotai_GettingStartedGuide_47 7 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

CP_Toxotai_GettingStartedGuide_4 CP_Toxotai_GettingStartedGuide_4 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Contents
Safety, Environmental, and Electronic Emissions Notices..................................3
Introduction...........................................................................................................11
Welcome ............................................................................................................11
Check Point 4000 Appliances Overview .............................................................11
Shipping Carton Contents...................................................................................12
Terminology........................................................................................................12
Rack Mounting ......................................................................................................15
Rack Mounting Hardware and Tools...................................................................15
Attaching the Ear Mount Brackets to the Appliance ............................................16
Attaching the Rail Plates ....................................................................................17
Attaching the Appliance Rails to the Appliance...................................................18
Installing the Appliance in the Rack ....................................................................20
Configuring Check Point 4000 Appliances .........................................................21
Powering On.......................................................................................................21
Using the First Time Configuration Wizard .........................................................22
Starting the First Time Configuration Wizard..................................................23
Welcome........................................................................................................23
Appliance Date and Time Setup ....................................................................23
Network Connections.....................................................................................24
Routing Table ................................................................................................24
Host, Domain Settings, and DNS Servers......................................................24
Management Type.........................................................................................24
Summary .......................................................................................................26
Creating the Network Object...............................................................................26
Advanced Configuration .....................................................................................27
Connecting to the CLI ....................................................................................27
Check Point 4000 Appliances Hardware .............................................................29
Front Panel Components....................................................................................29
Check Point Front 4200 .................................................................................29
Check Point 4600 Front Panel .......................................................................30
Check Point 4800 Front Panel .......................................................................31
Managing Check Point 4000 Appliances Using the LCD Panel......................32
Expansion Line Cards....................................................................................33
Hard Disk Drives............................................................................................34
Rear Panel Components ....................................................................................34
Main Power Switch ........................................................................................34
Redundant Power Supply Units (Check Point 4800) ......................................34
CP_Toxotai_GettingStartedGuide_49 9CP_Toxotai_GettingStartedGuide_49 9 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Customer Replaceable Parts..............................................................................34
Power Supply (Check Point 4800) .................................................................35
Expansion Line Card .....................................................................................37
Restoring Factory Defaults ..................................................................................39
Restoring Using the WebUI ................................................................................39
Restoring Using the Console Boot Menu............................................................40
Restoring Using the LCD Panel..........................................................................41
Registration and Support.....................................................................................43
Registration ........................................................................................................43
Support ..............................................................................................................43
Where To From Here?........................................................................................43
Compliance Information.......................................................................................45
Declaration of Conformity ...................................................................................45
CP_Toxotai_GettingStartedGuide_410 10CP_Toxotai_GettingStartedGuide_410 10 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Page 11
Chapter 1
Introduction
In This Chapter
Welcome 11
Check Point 4000 Appliances Overview 11
Shipping Carton Contents 12
Terminology 12
Welcome
7KDQN\RXIRUFKRRVLQJ&KHFN3RLQW¶V&KHFN3RLQW$SSOLDQFHV:HKRSHWKDW\RXZLOOEHsatisfied with this system and our support services. Check Point products provide your
business with the most up to date and secure solutions available today.
Check Point also delivers worldwide technical services including educational, professional and
support services through a network of Authorized Training Centers, Certified Support Partners
and Check Point technical support personnel to ensure that you get the most out of your
security investment.
For additional information on the Internet Security Product Suite and other security solutions,
refer to the Check Point Web site (http://www.checkpoint.com), or call Check Point at 1(800)
429-4391. For additional technical information about Check Point products, consult the Check
Point Support Center (http://supportcenter.checkpoint.com).
Welcome to the Check Point family. We look forward to meeting all of your current and future
network, application and management security needs.
Check Point 4000 Appliances
Overview
The family of Check Point 4000 Appliances enables organizations to maximize security in high-
performance environments such as large campuses or data centers. Combining integrated
firewall, IPSec VPN, and intrusion prevention with advanced acceleration technologies, Check
CP_Toxotai_GettingStartedGuide_411 11CP_Toxotai_GettingStartedGuide_411 11 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Shipping Carton Contents
Page 12
Point 4000 Appliances deliver a high-performance security platform capable of blocking
application layer threats. Even as new threats appear, Check Point 4000 Appliances maintain
or increase performance while protecting the network against attacks.
Key Features:
xProven, enterprise-class firewall, VPN, and intrusion prevention
xAccelerated security performance, including SecureXL and CoreXL technologies
xIntegrated load balancing and dynamic routing for data center reliability levels
xCentrally managed from Security Management Server/Check Point 4000 Appliances or as
a stand alone device
xAutomatic security protection updates from SmartDefense Services
This document provides:
xA brief overview of essential Check Point 4000 Appliances concepts and features
xA step by step guide to getting Check Point 4000 Appliances up and running
Note - Screen shots in this guide may apply only to the highest model
to which this guide applies.
Shipping Carton Contents
This section describes the contents of the shipping carton.
Item
Description
Appliance
Check Point 4000 Appliance
Rack Mounting Accessories
Hardware mounting kit
Cables
xPower cable
x1 Standard RJ-45 network cable
x1 Serial console cable
Documentation
xQuick Start Guide
xGetting Started Guide
xImage Management Guide
xUser license agreement
Terminology
The following terms are used in this guide:
CP_Toxotai_GettingStartedGuide_412 12CP_Toxotai_GettingStartedGuide_412 12 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Terminology
Introduction Page 13
xGateway7KHVHFXULW\HQJLQHWKDWHQIRUFHVWKHRUJDQL]DWLRQ¶VVHFXULW\SROLF\DQGDFWVDVDsecurity enforcement point.
xSecurity Policy: The policy created by the system administrator that regulates the flow of
incoming and outgoing communication.
xSecurity Management Server: The server used by the system administrator to manage
WKHVHFXULW\SROLF\7KHRUJDQL]DWLRQ¶VGDWDEDVHVDQGVHFXULW\SROLFLHVDUHVWRUHGRQWKHSecurity Management Server and downloaded to the gateway.
xSmartConsole: GUI applications that are used to manage various aspects of security
policy enforcement. For example, SmartView Tracker is a SmartConsole application that
manages logs.
xSmartDashboard: A SmartConsole GUI application that is used by the system
administrator to create and manage the security policy.
xLocally Managed Deployment: When all Check Point components responsible for both
the management and enforcement of the security policy (the Security Management Server
and the gateway) are installed on the same machine.
xCentrally Managed Deployment: When the gateway and the Security Management
Server are installed on separate machines.
CP_Toxotai_GettingStartedGuide_413 13CP_Toxotai_GettingStartedGuide_413 13 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

CP_Toxotai_GettingStartedGuide_414 14CP_Toxotai_GettingStartedGuide_414 14 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Page 15
Chapter 2
Rack Mounting
This chapter describes how to mount the appliance in a rack.
Important - Two people are required to install the appliance in a rack in order to prevent
any possible damage.
In This Chapter
Rack Mounting Hardware and Tools 15
Attaching the Ear Mount Brackets to the Appliance 16
Attaching the Rail Plates 17
Attaching the Appliance Rails to the Appliance 18
Installing the Appliance in the Rack 20
Rack Mounting Hardware and Tools
You must install rack mounting hardware on the appliance before you can mount it in a rack.
This table describes the rack mounting hardware.
Hardware Description
Qty.
Use
Ear mount bracket
2
Attaches to the appliance front panel. Both ear mount brackets
are identical.
Ear mount screws
6
Secures the ear mount brackets to the appliance front panel.
These screw heads are smaller (5 mm).
Appliance rail
2
Attaches to the appliance. Both rails are identical.
Rail plates
2
Attaches to the appliance rails. Both plates are identical.
Appliance rail screws
14
Secures the rail plates to the appliance rails and the rails to
the appliance. These screw heads are larger (8 mm).
CP_Toxotai_GettingStartedGuide_415 15CP_Toxotai_GettingStartedGuide_415 15 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Attaching the Ear Mount Brackets to the Appliance
Page 16
Rack Mounting Tools
xPhilips screwdriver. A magnetic head is recommended to hold screws in place and retrieve
dropped screws. A powered screwdriver is also useful.
Note - Screws to attach the ear mount brackets and rail plates to the rack are not
included.
Attaching the Ear Mount Brackets to
the Appliance
Attach the two ear mount brackets to the front of the appliance.
Note - The ear mount screws have 5 mm heads.
To attach the ear mount brackets to the appliance:
1. Attach the appliance ear bracket to one side of the appliance using three ear mount screws.
2. Do step 1 again for the other side of the appliance.
CP_Toxotai_GettingStartedGuide_416 16CP_Toxotai_GettingStartedGuide_416 16 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Attaching the Rail Plates
Rack Mounting Page 17
Attaching the Rail Plates
Attach the rail plates to the appliance rails to attach the appliance to the rear vertical rails of the
rack.
Item
Description
1
Appliance rail
2
Rail plate
Note - The appliance rail screws have 8 mm heads.
To attach the rail plates:
1. Attach a rail plate to an appliance rail using two appliance rail screws.
2. Do step 1 again for the other rail plate and appliance rail.
CP_Toxotai_GettingStartedGuide_417 17CP_Toxotai_GettingStartedGuide_417 17 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Attaching the Appliance Rails to the Appliance
Page 18
This figure displays the assembled rail plate and appliance rail.
Attaching the Appliance Rails to the
Appliance
Attach the appliance rails to the sides of the appliance. The rail plates are positioned to connect
the appliance rails to the rear of the rack.
Note - The appliance rail screws have 8 mm heads.
CP_Toxotai_GettingStartedGuide_41 1CP_Toxotai_GettingStartedGuide_41 1 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Attaching the Appliance Rails to the Appliance
Rack Mounting Page 19
To attach the appliance rails:
1. Set the appliance rail on the side of the appliance. The ridges on the appliances rails point
to the appliance. This diagram shows the appliance rail and rail plate positioned correctly:
2. Attach the appliance rails to the appliance using three appliance rail screws.
3. Do steps 1 and two again for the other side of the appliance.
CP_Toxotai_GettingStartedGuide_419 19CP_Toxotai_GettingStartedGuide_419 19 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM

Installing the Appliance in the Rack
Page 20
Installing the Appliance in the Rack
Install the appliance in the rack. It may be necessary to adjust the appliance rails to secure the
appliance to the rack.
Important - Two people are required to install the appliance in a rack in order to prevent
any possible damage.
To install the appliance in the rack:
1. Attach the ear mount brackets to the front of the rack.
2. Attach the rail plates to the rear of the rack.
3. Confirm that the appliance is stable and secure in the rack.
CP_Toxotai_GettingStartedGuide_420 20CP_Toxotai_GettingStartedGuide_420 20 05 July 2011 1:21:11 PM05 July 2011 1:21:11 PM