Checkpoint 13000 Series User manual

15 January 2015
Getting Started Guide
Check Point 13000
Appliances
Models: P-370, P-380
Classification: [Protected]

© 2015 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed under
licensing restricting their use, copying, distribution, and decompilation. No part of this product or related
documentation may be reproduced in any form or by any means without prior written authorization of Check
Point. While every precaution has been taken in the preparation of this book, Check Point assumes no
responsibility for errors or omissions. This publication and features described herein are subject to change
without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks.
Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of
relevant copyrights and third-party licenses.

Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the latest functional
improvements, stability fixes, security enhancements and protection against new and evolving attacks.
Latest Documentation
The latest version of this document is at:
(http://supportcontent.checkpoint.com/documentation_download?ID=24591)
To learn more, visit the Check Point Support Center (http://supportcenter.checkpoint.com).
Revision History
Date
Description
15 January 2015
Added Appliance Physical Specifications (on page 13)
Replaced First Time Configuration Wizard installation procedures with a
link to the Support Center ("Initial Configuration" on page 16)
Updated Front Panel LCD Screen (on page 20)
Included Russian translation of this guide
23 July 2014
Unified 13000 Series
Added Remarques Relatives à la Sécurité, l'environnement et les
Émissions Électroniques (on page 7)
Replaced the telescopic rails installation procedure with a link to the
Telescoping Rails installation booklet ("Mounting the 13000 Appliance in
a Rack" on page 13)
Updated Security Management GUI Clients
10 July 2013
First release of this document
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments
(mailto:[e-mail]?subject=Feedback on Check Point 13000 Appliances
Getting Started Guide).

Safety, Environmental, and Electronic Emissions Notices
Check Point 13000 Appliances Getting Started Guide | 4
Safety, Environmental, and
Electronic Emissions Notices
Read the following warnings before setting up or using the appliance.
Warning - Do not block air vents. A minimum 1/2-inch clearance is required.
Warning - This appliance does not contain any user-serviceable parts. Do not remove any
covers or attempt to gain access to the inside of the product. Opening the device or
modifying it in any way has the risk of personal injury and will void your warranty. The
following instructions are for trained service personnel only.
Before you install or remove a chassis, or work near power supplies, turn off the power and unplug the
power cord.
To prevent damage to any system board, it is important to handle it with care. The following measures are
generally sufficient to protect your equipment from static electricity discharge:
When handling the board, to use a grounded wrist strap designed for static discharge elimination.
Touch a grounded metal object before removing the board from the antistatic bag.
Handle the board by its edges only. Do not touch its components, peripheral chips, memory modules or
gold contacts.
When handling processor chips or memory modules, avoid touching their pins or gold edge fingers.
Restore the communications appliance system board and peripherals back into the antistatic bag when
they are not in use or not installed in the chassis. Some circuitry on the system board can continue
operating even though the power is switched off.
Under no circumstances should the lithium battery cell used to power the real-time clock be allowed to
short. The battery cell may heat up under these conditions and present a burn hazard.
Warning - DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED.
REPLACE ONLY WITH SAME OR EQUIVALENT TYPE RECOMMENDED BY THE
MANUFACTURER. DISCARD USED BATTERIES ACCORDING TO THE
MANUFACTURER’S INSTRUCTIONS.
Disconnect the system board power supply from its power source before you connect or disconnect
cables or install or remove any system board components. Failure to do this can result in personnel
injury or equipment damage.
Avoid short-circuiting the lithium battery; this can cause it to superheat and cause burns if touched.
Do not operate the processor without a thermal solution. Damage to the processor can occur in
seconds.
Class 1 laser product warning - A totally enclosed laser system containing a class 1 laser.
Rack Mount Instructions
The following or similar rack-mount instructions are included with the installation instructions:
1. Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the operating ambient
temperature of the rack environment may be greater than room ambient. Therefore, consideration
should be given to installing the equipment in an environment compatible with the maximum ambient
temperature specified by the manufacturer.
2. Reduced Air Flow - Installation of the equipment in a rack should be such that the amount of air flow
required for safe operation of the equipment is not compromised.
3. Mechanical Loading - Mounting of the equipment in the rack should be such that a hazardous condition
is not achieved due to uneven mechanical loading.

Safety, Environmental, and Electronic Emissions Notices
Check Point 13000 Appliances Getting Started Guide | 5
4. Circuit Overloading - Consideration should be given to the connection of the equipment to the supply
circuit and the effect that overloading of the circuits might have on over current protection and supply
wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this
concern.
5. Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular
attention should be given to supply connections other than direct connections to the branch circuit (e.g.
use of power strips).
For California:
Perchlorate Material - special handling may apply. See http://www.dtsc.ca.gov/hazardouswaste/perchlorate
The foregoing notice is provided in accordance with California Code of Regulations Title 22, Division 4.5,
Chapter 33. Best Management Practices for Perchlorate Materials. This product, part, or both may include a
lithium manganese dioxide battery which contains a perchlorate substance.
Proposition 65 Chemical
Chemicals identified by the State of California, pursuant to the requirements of the California Safe Drinking
Water and Toxic Enforcement Act of 1986, California Health & Safety Code s. 25249.5, et seq. ("Proposition
65"), that is "known to the State to cause cancer or reproductive toxicity" (see http://www.calepa.ca.gov)
WARNING:
Handling the cord on this product will expose you to lead, a chemical known to the State of California to
cause cancer, and birth defects or other reproductive harm. Wash hands after handling.
Federal Communications Commission (FCC) Statement:
For a Class A digital device or peripheral
Note: This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against
harmful interference when the equipment is operated in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with
the instruction manual, may cause harmful interference to radio communications. Operation of this
equipment in a residential area is likely to cause harmful interference in which case the user will be required
to correct the interference at his own expense.
For a Class B digital device or peripheral
NOTE: This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against
harmful interference in a residential installation. This equipment generates, uses and can radiate radio
frequency energy and, if not installed and used in accordance with the instructions, may cause harmful
interference to radio communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or television reception,
which can be determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
Information to user:
The user's manual or instruction manual for an intentional or unintentional radiator shall caution the user that
changes or modifications not expressly approved by the party responsible for compliance could void the
user's authority to operate the equipment. In cases where the manual is provided only in a form other than
paper, such as on a computer disk or over the Internet, the information required by this section may be
included in the manual in that alternative form, provided the user can reasonably be expected to have the
capability to access information in that form.

Remarques Relatives à la Sécurité, l'environnement et les Émissions Électroniques
Check Point 13000 Appliances Getting Started Guide | 6
Canadian Department Compliance Statement:
This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe A est
conforme à la norme NMB-003 du Canada.
This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est
conforme à la norme NMB-003 du Canada.
Japan Compliance Statement:
Class A
Class B
European Union (EU) Electromagnetic Compatibility Directive
This product is herewith confirmed to comply with the requirements set out in the Council Directive on the
Approximation of the Laws of the Member States relating to Electromagnetic Compatibility Directive
(2004/108/EC). For the evaluation regarding the Electromagnetic Compatibility (2004/108/EC)
This product is in conformity with Low Voltage Directive 2006/95/EC, and complies with the requirements in
the Council Directive 2006/95/EC relating to electrical equipment designed for use within certain voltage
limits and the Amendment Directive 93/68/EEC.
Product Disposal
This symbol on the product or on its packaging indicates that this product must not be disposed of with your
other household waste. Instead, it is your responsibility to dispose of your waste equipment by handing it
over to a designated collection point for the recycling of waste electrical and electronic equipment. The
separate collection and recycling of your waste equipment at the time of disposal will help to conserve
natural resources and ensure that it is recycled in a manner that protects human health and the
environment. For more information about where you can drop off your waste equipment for recycling, please
contact your local city office or your household waste disposal service.

Remarques Relatives à la Sécurité, l'environnement et les Émissions Électroniques
Check Point 13000 Appliances Getting Started Guide | 7
Remarques Relatives à la Sécurité,
l'environnement et les Émissions
Électroniques
Avant de mettre en place ou d'utiliser l'appareil, veuillez lire les avertissements suivants.
Avertissement: Ne pas obturer les aérations. Il faut laisser au moins 1,27 cm d'espace libre.
Avertissement: Cet appareil ne contient aucune pièce remplaçable par l'utilisateur. Ne pas retirer
le capot ni tenter d'atteindre l'intérieur. L'ouverture ou la modification de l'appareil peut entraîner
un risque de blessure et invalidera la garantie. Les instructions suivantes sont réservées à un
personnel de maintenance formé.
Avant de manipuler une appliance ou ses blocs d’alimentations, l’éteindre et débrancher son câble
électrique.
Pour éviter d'endommager les cartes système, il est important de les manipuler avec soin. Les mesures
suivantes sont généralement suffisantes pour protéger votre équipement contre les décharges d'électricité
statique:
Avant de manipuler la carte, portez aux poignet un bracelet antistatique relié à la terre.
Touchez un objet métallique relié à la terre avant d'extraire la carte de son sachet antistatique.
Ne tenez la carte que par ses bords. Ne touchez aucun composant, puce périphérique, module mémoire
ou contact plaqué or.
Lorsque vous manipulez des processeurs ou des modules mémoire, évitez de toucher leurs broches ou
les pistes de contact dorées.
Remettez dans leur sachet antistatique la carte système et les périphériques de l'appareil de
communications lorsqu'ils ne sont pas utilisés ou installés dans le châssis. Certains circuits sur la carte
système peuvent rester fonctionnels même si l'appareil est éteint.
Il ne faut jamais court-circuiter la pile au lithium qui alimente l'horloge temps-réel. Elle risque de
s'échauffer et de causer des brûlures.
Avertissement: DANGER D'EXPLOSION SI LA PILE EST MAL REPLACÉE. NE REMPLACER
QU'AVEC UN TYPE IDENTIQUE OU ÉQUIVALENT, RECOMMANDÉ PAR LE
CONSTRUCTEUR. LES PILES DOIVENT ÊTRE MISES AU REBUT CONFORMÉMENT AUX
INSTRUCTIONS DE LEUR FABRICANT.
Débrancher l'alimentation de la carte système de sa source électrique avant de connecter ou
déconnecter des câbles ou d'installer ou retirer des composants. À défaut, les risques sont
d'endommager l'équipement et de causer des blessures corporelles.
Ne pas court-circuiter la pile au lithium: elle risque de surchauffer et de causer des brûlures en cas de
contact.
Ne pas faire fonctionner le processeur sans refroidissement. Le processeur peut être endommagé en
quelques secondes.
Produit laser de classe 1: un système laser totalement clos et contenant un laser de classe 1.
Instructions de montage en rack
Les instructions d'installation sont livrées avec les instructions de montage en rack ci-après (ou similaires):
1. Fonctionnement à température plus élevée: Si l'appareil est installé dans une armoire fermée ou un
rack à plusieurs unités, la température du rack en fonctionnement peut être supérieure à la température

Remarques Relatives à la Sécurité, l'environnement et les Émissions Électroniques
Check Point 13000 Appliances Getting Started Guide | 8
ambiante de la pièce. Avant d'installer l'équipement, il faut donc s'assurer qu'il sera dans un
environnement compatible avec la température ambiante maximale indiquée par le constructeur.
2. Circulation d'air réduite: L'installation dans un rack doit s'assurer de ne pas limiter la circulation de l'air
nécessaire au bon fonctionnement de l'équipement.
3. Charge mécanique: Lors du montage de l'équipement dans le rack, il faut faire attention à ne pas
déséquilibrer l'ensemble. Un rack se remplit en commençant par le bas.
4. Surcharge: Pour la connexion de l'équipement au circuit électrique, il faut vérifier les risques de
surcharge et les éventuelles conséquences sur la protection contre les surtensions et sur le câblage
électrique. Dans ce contexte, il faut tenir compte des informations mentionnées par l’étiquette apposée
sur l’équipement.
5. Mise à la terre: Les équipements montés en rack doivent être en permanence reliés à un terre fiable. Il
faut faire particulièrement attention aux branchements qui ne vont pas directement à la source
électrique (par exemple des multiprises).
Pour la Californie:
Matériau perchloraté: Manipulation spéciale potentiellement requise. Voir
http://www.dtsc.ca.gov/hazardouswaste/perchlorate.
L'avis suivant est fourni conformément au California Code of Regulations, titre 22, division 4.5, chapitre 33.
Meilleures pratiques de manipulation des matériaux perchloratés. Ce produit, cette pièce ou les deux
peuvent contenir une pile au dioxyde de lithium manganèse, qui contient une substance perchloratée.
Produits chimiques « Proposition 65 »
Les produits chimiques identifiés par l'état de Californie, conformément aux exigences du California Safe
Drinking Water and Toxic Enforcement Act of 1986 du California Health & Safety Code s. 25249.5, et seq.
(« Proposition 65 »), qui sont « connus par l'état pour être cancérigène ou être toxiques pour la
reproduction » (voir http://www.calepa.ca.gov).
AVERTISSEMENT:
La manipulation de ce cordon vous expose au contact du plomb, un élément reconnue par l'état de
Californie pour être cancérigène, provoquer des malformations à la naissance et autres dommages relatifs à
la reproduction. Se laver les mains après toute manipulation.
Déclaration à la Federal Communications Commission (FCC):
Pour un appareil ou périphérique numérique de classe A
Remarque: Cet équipement a été testé et déclaré conforme aux limites pour appareils numériques de
classe A, selon la section 15 des règlements de la FCC. Ces limitations sont conçues pour fournir une
protection raisonnable contre les interférences nocives dans un environnement commercial. Cet appareil
génère, et peut diffuser des fréquences radio et, dans le cas d’une installation et d’une utilisation non
conformes aux instructions, il peut provoquer des interférences nuisibles aux communications radio. Le
fonctionnement de cet équipement dans une zone résidentielle engendrera vraisemblablement des
perturbations préjudiciables, auquel cas l’utilisateur sera tenu d’éliminer ces perturbations à sa charge.
Pour un appareil ou périphérique numérique de classe B
Remarque: Cet équipement a été testé et déclaré conforme aux limites pour appareils numériques de
classe B, selon la section 15 des règlements de la FCC. Ces limitations sont conçues pour fournir une
protection raisonnable contre les interférences nocives dans un environnement résidentiel. Cet appareil
génère, et peut diffuser des fréquences radio et, dans le cas d’une installation et d’une utilisation non
conforme aux instructions, il peut provoquer des interférences nuisibles aux communications radio.
Cependant, il n’existe aucune garantie qu’aucune interférence ne se produira dans le cadre d'une
installation particulière. Si cet appareil provoque des interférences avec un récepteur radio ou un téléviseur,
ce qui peut être détecté en mettant l’appareil sous et hors tension, l’utilisateur peut essayer d’éliminer les
interférences en suivant au moins l’une des procédures suivantes:
Réorienter ou déplacer l’antenne de réception.
Augmenter la distance entre l’appareil et le récepteur.
Brancher l’appareil sur une prise appartenant à un circuit différent de celui sur lequel est branché le
récepteur.

Remarques Relatives à la Sécurité, l'environnement et les Émissions Électroniques
Check Point 13000 Appliances Getting Started Guide | 9
Consulter le distributeur ou un technicien radio/télévision qualifié pour obtenir de l’aide.
Information à l'intention de l'utilisateur:
Le manuel utilisateur ou le manuel d'instruction d'un dispositif rayonnant (intentionnel ou non) doit avertir
que toute modification non approuvée expressément par la partie responsable de la conformité peut annuler
le droit de faire fonctionner l'équipement. Si le manuel n'est pas fourni sous forme imprimée (par exemple
sur le disque d'un ordinateur ou via Internet), les informations requises par cette section doivent être
incluses dans ces versions du manuel, sous réserve que l'utilisateur soit raisonnablement capable d'y
accéder.
Déclaration de conformité du département canadien:
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
Directive de l'Union européenne relative à la compatibilité électromagnétique
Ce produit est certifié conforme aux exigences de la directive du Conseil concernant concernant le
rapprochement des législations des États membres relatives à la directive sur la compatibilité
électromagnétique (2004/108/CE). Pour l'évaluation concernant la compatibilité électromagnétique
(2004/108/CE).
Ce produit est conforme à la directive basse tension 2006/95/CE et satisfait aux exigences de la directive
2006/95/CE du Conseil relative aux équipements électriques conçus pour être utilisés dans une certaine
plage de tensions, selon les modifications de la directive 93/68/CEE.
Mise au rebut du produit
Ce symbole apposé sur le produit ou son emballage signifie que le produit ne doit pas être mis au rebut
avec les autres déchets ménagers. Il est de votre responsabilité de le porter à un centre de collecte désigné
pour le recyclage des équipements électriques et électroniques. Le fait de séparer vos équipements lors de
la mise au rebut, et de les recycler, contribue à préserver les ressources naturelles et s'assure qu'ils sont
recyclés d'une façon qui protège la santé de l'homme et l'environnement. Pour obtenir plus d'informations
sur les lieux où déposer vos équipements mis au rebut, veuillez contacter votre municipalité ou le service de
gestion des déchets.

Contents
Important Information............................................................................................................ 3
Safety, Environmental, and Electronic Emissions Notices................................................. 4
Remarques Relatives à la Sécurité, l'environnement et les Émissions Électroniques..... 7
Introduction.......................................................................................................................... 11
Welcome........................................................................................................................... 11
13000 Appliance Overview................................................................................................ 11
Shipping Carton Contents.................................................................................................. 12
Terminology....................................................................................................................... 12
Mounting the 13000 Appliance in a Rack........................................................................... 13
Appliance Physical Specifications...................................................................................... 13
Appliance Air Vents........................................................................................................... 13
Configuring 13000 Appliance.............................................................................................. 15
Starting the Appliance ....................................................................................................... 15
Available Software Images ........................................................................................... 15
Synchronizing Software RAID....................................................................................... 15
Initial Configuration............................................................................................................ 16
Creating the Network Object.............................................................................................. 17
Advanced Configuration.................................................................................................... 17
Connecting to the 13000 Appliance CLI........................................................................ 17
13000 Appliance Hardware.................................................................................................. 18
Front Panel........................................................................................................................ 18
Front Panel LEDs and Ports.............................................................................................. 19
Front Panel LCD Screen ................................................................................................... 20
Using the LCD Panel.................................................................................................... 20
Lights Out Management .................................................................................................... 21
Rear Panel........................................................................................................................ 21
Replacing and Upgrading Components............................................................................. 22
Restoring Factory Defaults................................................................................................. 23
Restoring Using the WebUI............................................................................................... 23
Gaia.............................................................................................................................. 23
SecurePlatform............................................................................................................. 23
Restoring Using the Console Boot Menu........................................................................... 24
Restoring Using the LCD Panel......................................................................................... 24
Registration and Support.................................................................................................... 26
Registration....................................................................................................................... 26
Support.............................................................................................................................. 26
Where To From Here?....................................................................................................... 26
Compliance Information...................................................................................................... 27
Declaration of Conformity.................................................................................................. 27

Check Point 13000 Appliances Getting Started Guide | 11
Chapter 1
Introduction
In This Section:
Welcome................................................................................................................. 11
13000 Appliance Overview..................................................................................... 11
Shipping Carton Contents.......................................................................................12
Terminology ............................................................................................................12
Welcome
Congratulations on your new 13000 appliance. We hope that you will be satisfied with this Security Gateway
and our support services. Check Point products provide your business with the most up to date and secure
solutions available today.
Check Point also delivers worldwide technical services including educational, professional and support
services through a network of Authorized Training Centers, Certified Support Partners and Check Point
technical support personnel to ensure that you get the most out of your security investment.
For additional information on the Internet Security Product Suite and other security solutions, refer to the
Check Point web site (http://www.checkpoint.com), or call Check Point at 1(800) 429-4391. For additional
technical information about Check Point products, consult the Check Point Support Center
(http://supportcenter.checkpoint.com).
Welcome to the Check Point family. We look forward to meeting all of your current and future network,
application and management security needs.
13000 Appliance Overview
13000 Appliance let organizations maximize security in high-performance environments such as large
campuses or data centers. Combining integrated Firewall, IPsec VPN, and intrusion prevention with
advanced acceleration technologies. 13000 Appliance deliver a high-performance security platform that can
block application layer threats. Even as new threats appear, it maintains or increases performance and
protects the network against attacks.
This appliance supports the SecurePlatform and Gaia Operating Systems. Gaia is a single, unified network
security Operating System that combines the best of Check Point's SecurePlatform and IPSO, the operating
system from the Nokia security products. Gaia supports the full portfolio of Check Point Software Blades,
Security Gateway and Security Management products.
Key Features:
Proven, enterprise-class firewall, VPN, and intrusion prevention
Accelerated security performance, that includes SecureXL and CoreXL technologies
Integrated load balancing and dynamic routing for data center reliability levels
Centrally managed from Security Management Server/13000 Appliance or as a standalone device
Automatic security protection updates from Check Point

Introduction
Check Point 13000 Appliances Getting Started Guide | 12
Shipping Carton Contents
This section describes the contents of the shipping carton.
Item
Description
Appliance
13000 appliance
Rack Mounting Accessories
Telescopic rails
Cables
2 power cables
1 standard RJ-45 network cable
1 serial console cable
Documentation
Getting Started Guide
Quick Start Guide
Image Management Guide
Installing Telescoping Rails Guide
User license agreement
Terminology
The following terms are used in this guide:
Gateway: The security engine that enforces the organization’s security policy and acts as a security
enforcement point.
Security Policy: The policy created by the system administrator that regulates the flow of incoming and
outgoing communication.
Security Management Server: The server used by the system administrator to manage the security
policy. The organization’s databases and security policies are stored on the Security Management
Server and downloaded to the gateway.
SmartConsole: GUI applications that are used to manage various aspects of security policy
enforcement. For example, SmartView Tracker is a SmartConsole application that manages logs.
SmartDashboard: A SmartConsole GUI application that is used by the system administrator to create
and manage the security policy.
Locally Managed Deployment: When all Check Point components responsible for both the
management and enforcement of the security policy (the Security Management Server and the gateway)
are installed on the same machine.
Centrally Managed Deployment: When the gateway and the Security Management Server are
installed on separate machines.

Check Point 13000 Appliances Getting Started Guide | 13
Chapter 2
Mounting the 13000 Appliance in a
Rack
In This Section:
Appliance Physical Specifications........................................................................... 13
Appliance Air Vents................................................................................................. 13
You can install your 13000 Appliance Appliances with the Telescoping Rails hardware. See the Installing the
Telescoping Rails (http://downloads.checkpoint.com/dc/download.htm?ID=32424) booklet for the procedure.
Appliance Physical Specifications
These are the physical specifications of the Check Point appliance.
Appliance
Width
Depth
Height
13500
17.4 in (44.2 cm)
23.6 in (600 mm)
3.44 in (8.8 cm) (2U)
13800
17.4 in (44.2 cm)
23.6 in (600 mm)
3.44 in (8.8 cm) (2U)
Appliance Air Vents
Make sure that the appliance air vents have sufficient airflow when the appliance is mounted in a rack.
Important - If the appliance vents are blocked, the appliance can become too hot and it can be
damaged.
The appliance and rack rails have been tested in extreme conditions and do not block air flow to the
appliance. These appliances are specifically designed to install with these rails.

Mounting the 13000 Appliance in a Rack
Check Point 13000 Appliances Getting Started Guide | 14

Check Point 13000 Appliances Getting Started Guide | 15
Chapter 3
Configuring 13000 Appliance
In This Section:
Starting the Appliance.............................................................................................15
Initial Configuration ................................................................................................. 16
Creating the Network Object................................................................................... 17
Advanced Configuration.......................................................................................... 17
Starting the Appliance
Connect the appliance to a power source and turn on the appliance. When the appliance is ready, you can
do the First Time Configuration Wizard to configure it.
To start the appliance:
1. Connect the power cables to the power supply units in the rear panel.
The appliance turns on.
2. From the rear of the appliance, turn on the Power button.
Note - When a power supply unit fails or is not connected to the outlet, an alarm sounds
continuously. If you hear the alarm, replace the faulty power supply unit immediately, and
connect the new unit to an A/C outlet.
To turn off the alarm, press the red Alarm off button on the rear panel of the appliance.
The status of the appliance shows on the LCD screen as it initializes and boots up. The appliance is ready
for use when the LCD screen shows the model number.
Your LCD screen will show the model number of your appliance. The picture is just an example.
Available Software Images
The 13000 Appliance comes with different software images. Select the software image you want to use.
Reverting to a software image takes a few minutes. To follow progress and see when the appliance is ready,
connect to the appliance using a serial console.
For more about software images, see the 13000 Appliance home page
(http://supportcontent.checkpoint.com/solutions?id=sk68701).
Synchronizing Software RAID
The appliance does RAID1 mirroring across two hard disk drives using software RAID. This lets the
appliance continue to work if there is a hard disk failure.

Configuring 13000 Appliance
Check Point 13000 Appliances Getting Started Guide | 16
The mirror rebuild is automatic. The two hard disk drives must be the same type.
First Boot Up
At first boot up, wait for two hours to let the hard disks fully synchronize. If you reboot the appliance before
the hard disks are synchronized, the synchronization starts again at the next boot.
To monitor the RAID status of the disks from the CLI:
1. Log in to the appliance.
2. Use one of these tools to monitor the RAID status of the hard disks:
Run raid_diagnostic
This shows data about the RAID and hard disks, with the percent synchronization done.
DiskID 0 is the left hard disk. DiskID 1 is the right hard disk.
Run cpstat os –f raidInfo
This shows almost the same information as the raid_diagnostic command in tabular format
Initial Configuration
Configure the appliance with the First Time Configuration Wizard.
To start the First Time Configuration Wizard on Gaia:
1. Connect a standard network cable to the appliance management interface and to your management
network.
The management interface is marked MGMT.
This interface is preconfigured with the IP address 192.168.1.1
Note - Make sure that the management interface on the computer is on the same network subnet as the
appliance. For example: IP address 192.168.1.x and Netmask 255.255.255.0
You can change the interface in the WebUI, after you complete the First Time Configuration Wizard.
2. Open a connection from a browser to the management IP address.
The login page opens.
3. Log in to the system with the default username and password: admin and admin
4. Click Login.
The First Time Configuration Wizard runs.
5. Follow the instructions on the screen.
Note - Settings that you configure in the First Time Configuration Wizard, can be changed later in
the WebUI, from an Internet browser go to https://<appliance_ip_address>
To start the First Time Configuration Wizard on SecurePlatform:
1. Connect a standard network cable to the appliance's management interface and to your management
network.
The management interface is marked MGMT.
2. Open Internet Explorer to the default management IP address, https://192.168.1.1:4434
Note - Pop-ups must always be allowed on https://<appliance_ip_address>
The login page opens.
3. Log in to the system using the default login name/password: admin/admin and click Login.
Note - The features configured in the wizard are accessible after completing the wizard via the
WebUI menu. Go to https://<appliance_ip_address>:4434 to open the WebUI.
4. Change the administrator password, as prompted. The default password gives you access to the
appliance. For security, you must change it to a more secure password.

Configuring 13000 Appliance
Check Point 13000 Appliances Getting Started Guide | 17
5. In the Password recovery login token section, download a Login Token to use if you forget the
password. We recommend that you save the password recovery login token file in a safe location.
The First Time Configuration Wizard runs.
6. Follow the instructions on the screen.
Configuration Options
There are different First Time Configuration Wizard options for the Gaia and the SecurePlatform operating
systems. See the Installation and Upgrade Guide related to the software version. Search for the guide with
the applicable software version in the Support Center documentation section
(https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doSwichtab=Documentation&tab=
Documentation).
Note: From R77, the Installation and Upgrade Guides are released only for major versions and by Gaia or
non-Gaia platforms. For example, for the Gaia platform R77.10 version, see the R77 Versions Installation
and Upgrade Guide for Gaia Platforms.
Creating the Network Object
Configure the 13000 Appliance object as a Security Gateway object in the Security Management Server
database.
1. Open SmartDashboard.
2. Configure a new gateway object for the appliance.
3. Enter the IP address for the appliance.
4. For a centrally managed deployment, create Secure Internal Communication (SIC) between the Security
Gateway and the Security Management Server. Enter the activation key you used in the First Time
Configuration Wizard.
5. Configure the topology.
6. Install the security policy.
Advanced Configuration
Advanced configuration on Gaia
Advanced configuration on Gaia can be done from the WebUI or the CLI.
Advanced configuration on SecurePlatform
Advanced configuration on SecurePlatform can be done with the sysconfig menu from the CLI.
Note - The sysconfig menu is only available after running the First Time Configuration
Wizard in the WebUI.
Connecting to the 13000 Appliance CLI
To connect to the command line interface of the 13000 Appliance, use one of these:
The included serial console cable (DB9 DTE to RJ45), with terminal emulation software, such as PuTTY
(from Windows) or Minicom (from Unix/Linux).
Connection parameters for 13000 Appliance are: 9600bps, 8 bits, no parity, 1 stop bit (8N1), Flow
Control - None.
An SSH connection to the management interface (if SSHD is configured).

Check Point 13000 Appliances Getting Started Guide | 18
Chapter 4
13000 Appliance Hardware
In This Section:
Front Panel.............................................................................................................. 18
Front Panel LEDs and Ports ................................................................................... 19
Front Panel LCD Screen......................................................................................... 20
Lights Out Management.......................................................................................... 21
Rear Panel.............................................................................................................. 21
Replacing and Upgrading Components.................................................................. 22
Front Panel
Item
Component
Description
1
System LEDs
System power, system status, and hard disk activity
2
LCD screen
3
Keypad
Perform basic management operations
4
Expansion line card
8 Port 10/100/1000Base-T RJ-45. Model: CPAC-8-1C-13000
5
Expansion line card
4 Port 10/100/1000Base-T RJ-45. Model: CPAC-4-1C-13000
6
Expansion line card
Expansion slot
7
Appliance ports
Use these ports to connect to the appliance ("Front Panel LEDs and Ports"
on page 19)
8
2 Hard disk drives
When monitoring the disks with the raid_diagnostic command,
DiskID 0 is the left disk, and DiskID 1 is the right disk

13000 Appliance Hardware
Check Point 13000 Appliances Getting Started Guide | 19
Front Panel LEDs and Ports
Item
Component
Description
1
Management port
For an Ethernet connection to a remote management computer
2
Synchronization port
Synchronize with cluster members or a High Availability peer
3
LOM port
LOM (Lights Out Management) port to connect to the LOM card
4
Console port
For a serial connection to the appliance using a terminal emulation
program such as HyperTerminal
5
Hard disk drive (HDD)
power LED
Off - HDD power is off
On (Green) - HDD power is on
6
Hard disk drive (HDD)
activity LED
Off - No HDD Activity
On (Green) - HDD Activity
7
Port activity LED
Off - No activity
Slow Blink (Amber) - Activity
8
Link LED
Off - No Link or 10M link
On (Green - 100M link
On (Amber) - 1000M link
9
USB ports
10
Reset
Does a hardware reset

13000 Appliance Hardware
Check Point 13000 Appliances Getting Started Guide | 20
Front Panel LCD Screen
Item
Component
Description
1
System Power
Off - System power off
On (Green) - System power on
2
System Status
Off - System OK
Orange - Alarm for voltage, temperature or fan
3
Hard disk drive (HDD)
activity
Off - No HDD activity
On (Green) - HDD activity
Using the LCD Panel
The appliance has an LCD panel that you can use to do these basic management operations:
Configure the management IP address, netmask, and default gateway of the appliance
Reboot the appliance
Menu Options
Menu
Sub-menu
Purpose
Network
Set Mgmt IP
Set the management interface IP address.
Set Netmask
Set the management interface Netmask.
Set Default GW
Set the management interface default gateway.
System
Reboot
Reboot the appliance.
LCD Panel Buttons
To
Press
Enter the main menu
Any button, other than
Navigate the menu
or
Change a number
or