Checkpoint 730 User manual

Getting Started Guide
Check Point 730/750
Appliance
Locally Managed
Models: L-71, L-71W, L-71WD Classification: [Protected] P/N 707785

2
© 2018 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation
are protected by copyright and distributed under licensing
restricting their use, copying, distribution, and decompilation.
No part of this product or related documentation may be
reproduced in any form or by any means without prior written
authorization of Check Point. While every precaution has been
taken in the preparation of this book, Check Point assumes no
responsibility for errors or omissions. This publication and
features described herein are subject to change without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to
restrictions as set forth in subparagraph (c)(1)(ii) of the Rights
in Technical Data and Computer Software clause at DFARS
252.227-7013 and FAR 52.227-19.
TRADEMARKS:
Refer to the Copyright page
https://www.checkpoint.com/copyright/ for a list of our
trademarks.
Refer to the Third Party copyright notices
https://www.checkpoint.com/about-us/third-party-trademarks
-and-copyrights/ for a list of relevant copyrights and
third-party licenses.

3
Latest Documentation
The latest version of this document is at:
http://downloads.checkpoint.com/dc/download.htm?ID=78564
To learn more, visit the Check Point Support Center
https://supportcenter.checkpoint.com.
Feedback
Check Point is engaged in a continuous effort to improve its
documentation.
Please help us by sending your comments
mailto:[e-mail]?subject=Feedba
ck on Check Point 730/750 Appliance Locally Managed Getting
Started Guide.

Contents
Health and Safety Information 9
Informations relatives à la santé et à la sécurité (Class B)28
Introduction 47
Before You Get Started..........................................................48
Shipping Carton Contents.....................................................49
Appliance Diagrams and Specifications............................50
Front Panel.........................................................................................51
Back Panel.......................................................................................... 54
Check Point Software Blades Overview ............................56
Access Policy ...........................................................................57
Threat Prevention...................................................................57
VPN ............................................................................................58
Cloud Services.........................................................................58
Configuring Check Point 730/750 Appliance 59
Workflow ..................................................................................59
Setting up the Check Point 730/750 Appliance................60
Connecting the Cables...........................................................60
First Time Deployment Options 61
Using the First Time Configuration Wizard ......................62
Starting the First Time Configuration Wizard..................... 62

Welcome ..............................................................................................63
Authentication Details....................................................................66
Appliance Date and Time Settings............................................67
Appliance Name................................................................................69
Internet Connection ........................................................................70
Local Network ...................................................................................74
Wireless Network............................................................................76
Administrator Access.....................................................................77
Appliance Registration ..................................................................79
Software Blade Activation............................................................82
Summary .............................................................................................83
Zero Touch Cloud Service .................................................... 84
USB Drive or SD Card ........................................................... 90
Basic System Configuration 91
Threat Prevention Updates ................................................. 91
Firmware Upgrades.............................................................. 92
Internet Connectivity............................................................. 93
Licensing.................................................................................. 94
Backup and Restore .............................................................. 95
Configuring Access Policy 97
Configuring Firewall Policy................................................. 97
Setting Outgoing Services.................................................... 99
Configuring Applications and URL Filtering.................... 99
Configuring Access Policy ..................................................101
Blocking Specific Applications or URLs ..........................101
Creating a Permanent Access Rule..................................102

Blocking Access for Users or Groups..............................104
Configuring Threat Prevention 105
Cyber Threats........................................................................105
Enabling/Disabling Threat Prevention Control .............106
IPS Security Levels...............................................................108
Changing the Anti-Virus, Anti-Bot and Threat Emulation
Policy .......................................................................................108
Scheduling Blade Updates .................................................110
Configuring the Anti-Spam Blade.....................................110
Configuring the Anti-Spam Policy ....................................111
Configuring Anti-Spam Exceptions ..................................112
Configuring Anti-Spam to Detect-Only Mode.................113
Setting up Users and Administrators 115
Configuring Local System Administrators .....................116
Editing Information of Locally Defined Administrators117
Deleting a Locally Defined Administrator.......................117
Configuring Local Users .....................................................117
Granting Remote Access Permissions ............................120
Editing a Specific User or Group.......................................121
Deleting a User or Group ....................................................121
Setting up Cloud Services 123
Connecting to Cloud Services............................................124
Guest Network 127

Configuring a Guest Network.............................................127
Monitoring and Reports 129
Viewing Monitoring Reports...............................................129
Viewing Security Reports....................................................130
Viewing System Logs ...........................................................131
Getting Support 133
Support....................................................................................133
Where to From Here ............................................................134

9
Health and Safety
Information
Read these warnings before setting up or using the appliance.
Warning - Do not block air vents. A minimum
1/2-inch clearance is required.
Warning - This appliance does not contain any
user-serviceable parts. Do not remove any covers
or attempt to gain access to the inside of the
product. Opening the device or modifying it in any
way has the risk of personal injury and will void
your warranty. The following instructions are for
trained service personnel only.
Power Supply Information
To reduce potential safety issues with the DC power source,
only use one of these:
•The AC adapter supplied with the appliance.
•A replacement AC adapter supplied by Check Point.
•An AC adapter purchased as an accessory from Check
Point.

10
To prevent damage to any system, it is important to handle all
parts with care. These measures are generally sufficient to
protect your equipment from static electricity discharge:
•Restore the communications appliance system board and
peripherals back into the antistatic bag when they are not
in use or not installed in the chassis. Some circuitry on the
system board can continue operating when the power is
switched off.
•Do not allow the lithium battery cell used to power the
real-time clock to short. The battery cell may heat up
under these conditions and present a burn hazard.
Warning - DANGER OF EXPLOSION IF BATTERY IS
INCORRECTLY REPLACED. REPLACE ONLY WITH
SAME OR EQUIVALENT TYPE RECOMMENDED BY
THE MANUFACTURER. DISCARD USED
BATTERIES ACCORDING TO THE
MANUFACTURER’S INSTRUCTIONS.
•Do not dispose of batteries in a fire or with household
waste.
•Contact your local waste disposal agency for the address of
the nearest battery deposit site.
•Disconnect the system board power supply from its power
source before you connect or disconnect cables or install
or remove any system board components. Failure to do this
can result in personnel injury or equipment damage.
•Avoid short-circuiting the lithium battery; this can cause it
to superheat and cause burns if touched.
•Do not operate the processor without a thermal solution.
Damage to the processor can occur in seconds.

11
IMPORTANT SAFETY INSTRUCTIONS: When using your
telephone equipment, basic safety precautions should always
be followed to reduce the risk of fire, electric shock and injury
to persons, including the following:
•Do not use this product near water for example, near a
bathtub, washbowl, kitchen sink or laundry tub, in a wet
basement or near a swimming pool.
•Avoid using a telephone (other than a cordless type) during
an electrical storm. There may be a remote risk of electric
shock from lightning.
•Do not use the telephone to report a gas leak in the vicinity
of the leak.
•Use only the power cord and batteries indicated in this
manual. Do not dispose of batteries in a fire. They may
explode. Check with local codes for possible special
disposal instructions.
SAVE THESE INSTRUCTIONS
CAUTION: To reduce the risk of fire, use only No. 26 AWG or
larger (e.g., 24 AWG) UL Listed or CSA Certified
Telecommunication Line Cord.
For California:
Perchlorate Material - special handling may apply. See
http://www.dtsc.ca.gov/hazardouswaste/perchlorate
The foregoing notice is provided in accordance with California
Code of Regulations Title 22, Division 4.5, Chapter 33. Best
Management Practices for Perchlorate Materials. This product,
part, or both may include a lithium manganese dioxide battery
which contains a perchlorate substance.

12
Proposition 65 Chemical
Chemicals identified by the State of California, pursuant to the
requirements of the California Safe Drinking Water and Toxic
Enforcement Act of 1986, California Health & Safety Code s.
25249.5, et seq. ("Proposition 65"), that is "known to the State
to cause cancer or reproductive toxicity." See
http://www.calepa.ca.gov.
WARNING:
Handling the cord on this product will expose you to lead, a
chemical known to the State of California to cause cancer, and
birth defects or other reproductive harm. Wash hands after
handling.
Declaration of Conformity
Manufacturer's Name: Check Point Software
Technologies Ltd.
Manufacturer's Address: 5 Ha'Solelim Street, Tel Aviv
67897, Israel
Declares under our sole responsibility, that the products:
Model Number: L-71, *L-71W, **L-71WD
Product Options: 730 Wired, 730 WiFi, 730 WiFi
+ DSL, 750 Wired, 750 WiFi,
750 WiFi + DSL
Date First Applied: January 2016

13
Conform to the following Product Specifications:
RF/Wi-Fi (* marked model)
Telecom (** marked model)
Certification
Type
EN 55032:2015 + AC:2016, Class B
EN 55032:2012 + AC:2013, Class B
EN 55024:2010 / A1:2015
EN 55024:2010
EN61000-3-2:2014
EN61000-3-3:2013
EN61000-4-2:2009
EN61000-4-3:2006+A1:2008+A2:2010
EN61000-4-4:2012
EN61000-4-5:2014
EN61000-4-6:2014
EN61000-4-11:2004
*EN 300 328 V2.1.1 (2016-11)
*EN 301 893 V2.1.1 (2017-05)
*EN 301 489-1 V2.1.1 (2017-02)
*EN 301 489-17 V3.1.1 (2017-02)
*EN 62311:2008 (SAR)
*EN 50386:2002, EN50383:2010 (SAR)
**ITU-T K.21 (04-2008)
EMC,
*RF/WiFi, **Telecom

14
Certification Type
AS/NZS CISPR 32:2015, Class B
AS/NZS CISPR 32:2013, Class B
* AS/NZS 4268:2017
* ARPANSA Radiation Protection
Standard No.3:2002AS/NZS 2772.2:2011
(SAR)
**AS/CA S041.1-2015 & AS/CA
S041.2-2015
**AS/CA S043.1:2015 / AS/CA
S043.2:2015
EMC,
*RF, **Telecom

15
Certification Type
47 CRF FCC Part 15, Subpart B, Class B
ANSI C63.4:2009
ANSI C63.4:2014
ICES-003:2012 Issue 5 Class B
ICES-003:2016 Issue 6, Class B
*47 CFR FCC Part15, Subpart C (section
15.247) ANSI C63.10:2013
*FCC Part 15, Subpart E (Section
15.407)
*KDB 905462 D02 UNII DFS Compliance
Procedures New Rules v02
*FCC Part 2 (Section 2.1091)
KDB 447498 D01
*RSS-247 Issue 1(1015-05)
*RSS-247 Issue 2 (2017-02)
*RSS-Gen Issue 4 (2014-11)
*RSS-102 Issue 5:2015
*IEEE C95.3-2002
*FCC KDB 447498 D01
**FCC Part 68, ANSI/TIA-968-B-3-2016
**CS-03 Part I Issue 9, Amendment 5,
March 2016
**CS-03, Part VIII, Issue 9, Amendment
5, March 2016
EMC,
*RF, **Telecom

16
Certification Type
VCCI, V-3/2015.4 Class B, V4/2012.04
VCCI-CISPR 32:2016, Class B
JP ARIB STD-T66 (V3.7), MIC notice 88
Appendix 43
JP ARIB STD-T71 (V6.1), MIC notice 88
Appendix 45
EMC,
*RF
EN 60950-1
IEC 60950-1
UL/ULc 60950-1,
AS/NZS 60950-1
Safety
Date and Place of Issue: January 2016, Tel Aviv, Israel
Federal Communications Commission (FCC) Statement:
FCC SDOC
According to FCC Part 15
We, Check Point Software Technologies Ltd.
Address: Shlomo Kaplan St 5, / HaSolelim St 5 Tel Aviv-Yafo #
67897, Phone: [phone].
This device complies with Part 15 of the FCC Rules. Operation
is subject to the following two conditions: (1) This device may
not cause harmful interference, and (2) This device must
accept any interference received, including interference that
may cause undesired operation.

17
Device reports and testing labs details:
Responsible party
Company Name: Check Point Software Technologies Inc.
Company Address: 959 Skyway Road Suite 300, San Carlos, CA
94070
Phone: [phone]
Name: Ronen Sasson
This equipment has been tested and found to comply with the
limits for a Class B digital device, pursuant to Part 15 of the
FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential
installation. This equipment generates, uses and can radiate
radio frequency energy and, if not installed and used in

18
accordance with the instructions, may cause harmful
interference to radio communications. However, there is no
guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference
to radio or television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try
to correct the interference by one of the following measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and
receiver.
•Connect the equipment into an outlet on a circuit different
from that to which the receiver is connected.
•Consult the dealer or an experienced radio/TV technician
for help.
FCC Caution:
•Any changes or modifications not expressly approved by
the party responsible for compliance could void the user's
authority to operate this equipment.
•This transmitter must not be co-located or operating in
conjunction with any other antenna or transmitter.
Radiation Exposure Statement
This equipment complies with FCC RF radiation exposure
limits set forth for an uncontrolled environment. This
equipment should be installed and operated with a minimum
distance of 20 centimeters between the radiator and your body.

19
For Country Code Selection Usage (WLAN Devices)
Note: The country code selection is for non-US models only
and is not available to all US models. Per FCC regulation, all
WiFi products marketed in the US must be fixed to US
operation channels only.
Customer Information - Part 68 Statement
This equipment complies with Part 68 of the FCC rules and the
requirements adopted by the ACTA. On the bottom of the device
that contains, among other information, a product identifier in
the format US: FK1DL01AL71WD. If requested, this number
must be provided to the telephone company.
Applicable connector jack Universal Service Order Codes
(“USOC”) for the Equipment is RJ11-C.
A plug and jack used to connect this equipment to the premises
wiring and telephone network must comply with the applicable
FCC Part 68 rules and requirements adopted by the ACTA. A
compliant telephone cord and modular plug is provided with
this product. It is designed to be connected to a compatible
modular jack that is also compliant. See installation
instructions for details.

20
The REN is used to determine the number of devices that may
be connected to a telephone line. Excessive RENs on a
telephone line may result in the devices not ringing in response
to an incoming call. In most but not all areas, the sum of RENs
should not exceed five (5.0). To be certain of the number of
devices that may be connected to a line, as determined by the
total RENs, contact the local telephone company. For products
approved after July 23, 2001, the REN for this product is part of
the product identifier that has the format US:
FK1DL01AL71WD. The digits represented by 0.1 are the REN
without a decimal point (e.g., 03 is a REN of 0.3).
If this Gateway causes harm to the telephone network, the
telephone company will notify you in advance that temporary
discontinuance of service may be required. But if advance
notice isn't practical, the telephone company will notify the
customer as soon as possible. Also, you will be advised of your
right to file a complaint with the FCC if you believe it is
necessary.
The telephone company may make changes in its facilities,
equipment, operations or procedures that could affect the
operation of the equipment. If this happens the telephone
company will provide advance notice in order for you to make
necessary modifications to maintain uninterrupted service.
If trouble is experienced with this Gateway, for repair or
warranty information, please contact:
Check Point
6330 Commerce Drive Suite 120, Irving, Texas 75063
Office Phone Numbers 972-444-6612