Checkpoint 12000 User manual

20 July 2011
Getting Started Guide
Check Point 12000
Appliances
Models: P-210, P-220, and P-230
CP_12000_Appliances_GettingStart1 1CP_12000_Appliances_GettingStart1 1 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

© 2011 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and
distributed under licensing restricting their use, copying, distribution, and decompilation. No
part of this product or related documentation may be reproduced in any form or by any means
without prior written authorization of Check Point. While every precaution has been taken in the
preparation of this book, Check Point assumes no responsibility for errors or omissions. This
publication and features described herein are subject to change without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in
subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013 and FAR 52.227-19.
TRADEMARKS:
Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our
trademarks.
Refer to the Third Party copyright notices
(http://www.checkpoint.com/3rd_party_copyright.html) for a list of relevant copyrights and third-
party licenses.
CP_12000_Appliances_GettingStart2 2CP_12000_Appliances_GettingStart2 2 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Welcome
Safety, Environmental, and Electronic Emissions Notices Page 3
Safety, Environmental, and
Electronic Emissions Notices
Read the following warnings before setting up or using the appliance.
Warning - Do not block air vents. A minimum 1/2-inch clearance is
required.
Warning - This appliance does not contain any user-serviceable parts. Do
not remove any covers or attempt to gain access to the inside of the
product. Opening the device or modifying it in any way has the risk of
personal injury and will void your warranty. The following instructions are for
trained service personnel only.
To prevent damage to any system board, it is important to handle it with care. The following
measures are generally sufficient to protect your equipment from static electricity discharge:
xWhen handling the board, to use a grounded wrist strap designed for static discharge
elimination.
xTouch a grounded metal object before removing the board from the antistatic bag.
xHandle the board by its edges only. Do not touch its components, peripheral chips, memory
modules or gold contacts.
xWhen handling processor chips or memory modules, avoid touching their pins or gold edge
fingers.
xRestore the communications appliance system board and peripherals back into the
antistatic bag when they are not in use or not installed in the chassis. Some circuitry on the
system board can continue operating even though the power is switched off.
xUnder no circumstances should the lithium battery cell used to power the real-time clock be
allowed to short. The battery cell may heat up under these conditions and present a burn
hazard.
Warning - DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY
REPLACED. REPLACE ONLY WITH SAME OR EQUIVALENT TYPE
RECOMMENDED BY THE MANUFACTURER. DISCARD USED
BATTERIES ACCORDING TO THE MANUFACTURER¶6,16758&7,216
CP_12000_Appliances_GettingStart3 3CP_12000_Appliances_GettingStart3 3 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Welcome
Page 4
xDisconnect the system board power supply from its power source before you connect or
disconnect cables or install or remove any system board components. Failure to do this can
result in personnel injury or equipment damage.
xAvoid short-circuiting the lithium battery; this can cause it to superheat and cause burns if
touched.
xDo not operate the processor without a thermal solution. Damage to the processor can
occur in seconds.
xClass 1 Laser Product Warning
Rack Mount Instructions
The following or similar rack-mount instructions are included with the installation instructions:
1. Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the
operating ambient temperature of the rack environment may be greater than room ambient.
Therefore, consideration should be given to installing the equipment in an environment
compatible with the maximum ambient temperature specified by the manufacturer.
2. Reduced Air Flow - Installation of the equipment in a rack should be such that the amount
of air flow required for safe operation of the equipment is not compromised.
3. Mechanical Loading - Mounting of the equipment in the rack should be such that a
hazardous condition is not achieved due to uneven mechanical loading.
4. Circuit Overloading - Consideration should be given to the connection of the equipment to
the supply circuit and the effect that overloading of the circuits might have on over current
protection and supply wiring. Appropriate consideration of equipment nameplate ratings
should be used when addressing this concern.
5. Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained.
Particular attention should be given to supply connections other than direct connections to
the branch circuit (e.g. use of power strips).
For California:
Perchlorate Material - special handling may apply. See
http://www.dtsc.ca.gov/hazardouswaste/perchlorate
The foregoing notice is provided in accordance with California Code of Regulations Title 22,
Division 4.5, Chapter 33. Best Management Practices for Perchlorate Materials. This product,
part, or both may include a lithium manganese dioxide battery which contains a perchlorate
substance.
Proposition 65 Chemical
Chemicals identified by the State of California, pursuant to the requirements of the California
Safe Drinking Water and Toxic Enforcement Act of 1986, California Health & Safety Code s.
25249.5, et seq. ("Proposition 65"), that is "known to the State to cause cancer or reproductive
toxicity" (see http://www.calepa.ca.gov)
WARNING:
CP_12000_Appliances_GettingStart4 4CP_12000_Appliances_GettingStart4 4 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Welcome
Safety, Environmental, and Electronic Emissions Notices Page 5
Handling the cord on this product will expose you to lead, a chemical known to the State of
California to cause cancer, and birth defects or other reproductive harm. Wash hands after
handling.
Federal Communications Commission (FCC) Statement:
For a Class A digital device or peripheral
Note: This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy and, if
not installed and used in accordance with the instruction manual, may cause harmful
interference to radio communications. Operation of this equipment in a residential area is likely
to cause harmful interference in which case the user will be required to correct the interference
at his own expense.
For a Class B digital device or peripheral
NOTE: This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates,
uses and can radiate radio frequency energy and, if not installed and used in accordance with
the instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be determined by turning
the equipment off and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
xReorient or relocate the receiving antenna.
xIncrease the separation between the equipment and receiver.
xConnect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
xConsult the dealer or an experienced radio/TV technician for help.
Information to user:
The user's manual or instruction manual for an intentional or unintentional radiator shall caution
the user that changes or modifications not expressly approved by the party responsible for
compliance could void the user's authority to operate the equipment. In cases where the
manual is provided only in a form other than paper, such as on a computer disk or over the
Internet, the information required by this section may be included in the manual in that
alternative form, provided the user can reasonably be expected to have the capability to access
information in that form.
CP_12000_Appliances_GettingStart5 5CP_12000_Appliances_GettingStart5 5 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Welcome
Page 6
Canadian Department Compliance Statement:
This Class A digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la
classe A est conforme à la norme NMB-003 du Canada.
This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la
classe B est conforme à la norme NMB-003 du Canada.
Japan Compliance Statement:
Class A
Class B
European Union (EU) Electromagnetic Compatibility Directive
This product is herewith confirmed to comply with the requirements set out in the Council
Directive on the Approximation of the Laws of the Member States relating to Electromagnetic
Compatibility Directive (2004/108/EC). For the evaluation regarding the Electromagnetic
Compatibility (2004/108/EC)
CP_12000_Appliances_GettingStart6 6CP_12000_Appliances_GettingStart6 6 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Welcome
Safety, Environmental, and Electronic Emissions Notices Page 7
This product is in conformity with Low Voltage Directive 2006/95/EC, and complies with the
requirements in the Council Directive 2006/95/EC relating to electrical equipment designed for
use within certain voltage limits and the Amendment Directive 93/68/EEC.
Product Disposal
This symbol on the product or on its packaging indicates that this product must not be disposed
of with your other household waste. Instead, it is your responsibility to dispose of your waste
equipment by handing it over to a designated collection point for the recycling of waste
electrical and electronic equipment. The separate collection and recycling of your waste
equipment at the time of disposal will help to conserve natural resources and ensure that it is
recycled in a manner that protects human health and the environment. For more information
about where you can drop off your waste equipment for recycling, please contact your local city
office or your household waste disposal service.
CP_12000_Appliances_GettingStart7 7CP_12000_Appliances_GettingStart7 7 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

CP_12000_Appliances_GettingStart CP_12000_Appliances_GettingStart 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Contents
Safety, Environmental, and Electronic Emissions Notices..................................3
Introduction...........................................................................................................11
Welcome ............................................................................................................11
Check Point 12000 Appliances Overview ...........................................................11
Shipping Carton Contents...................................................................................12
Terminology........................................................................................................13
Rack Mounting ......................................................................................................15
Rack Mounting Hardware and Tools...................................................................15
Rack Mounting Check Point 12200.....................................................................16
Attaching the Ear Mount Brackets to the Appliance .......................................16
Attaching the Rail Plates................................................................................17
Attaching the Appliance Rails to the Appliance ..............................................18
Installing the Appliance in the Rack ...............................................................20
Rack Mounting Check Point 12400 and 12600 ...................................................21
Attaching the Ear Mount Brackets to the Appliance .......................................21
Attaching the Rail Plates................................................................................22
Attaching the Appliance Rails to the Appliance ..............................................23
Installing the Appliance in the Rack ...............................................................24
Configuring Check Point 12000 Appliances .......................................................25
Powering On.......................................................................................................25
Using the First Time Configuration Wizard .........................................................26
Starting the First Time Configuration Wizard..................................................27
Welcome........................................................................................................27
Appliance Date and Time Setup ....................................................................27
Network Connections.....................................................................................28
Routing Table ................................................................................................28
Host, Domain Settings, and DNS Servers......................................................28
Management Type.........................................................................................28
Summary .......................................................................................................30
Creating the Network Object...............................................................................31
Advanced Configuration .....................................................................................31
Connecting to the CLI ....................................................................................31
Check Point 12000 Appliances Hardware ...........................................................33
Front Panel Components....................................................................................33
Check Point 12200 Front Panel .....................................................................33
Check Point 12400 Front Panel .....................................................................35
Check Point 12600 Front Panel .....................................................................37
CP_12000_Appliances_GettingStart9 9CP_12000_Appliances_GettingStart9 9 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Rear Panel Components ....................................................................................39
Check Point 12200 Rear Panel......................................................................39
Check Point 12400 and 12600 Rear Panel ....................................................40
Using the LCD Panel..........................................................................................40
Customer Replaceable Parts ...............................................................................42
Replacing Power Supplies..................................................................................42
Removing Power Supplies.............................................................................44
Installing Power Supplies...............................................................................44
Replacing Expansion Line Cards........................................................................45
Removing Expansion Line Cards...................................................................46
Installing Expansion Line Cards.....................................................................46
Replacing Hard Disk Drives on Check Point 12200 ............................................46
Removing a Hard Disk Drive..........................................................................47
Installing a Hard Disk Drive............................................................................47
Replacing Hard Disk Drives on Check Point 12400 and 12600 ..........................47
Removing a Hard Disk Drive..........................................................................48
Installing a Hard Disk Drive............................................................................48
Restoring Factory Defaults ..................................................................................49
Restoring Using the WebUI ................................................................................49
Restoring Using the Console Boot Menu............................................................50
Restoring Using the LCD Panel..........................................................................51
Registration and Support.....................................................................................53
Registration ........................................................................................................53
Support ..............................................................................................................53
Where To From Here?........................................................................................53
Compliance Information.......................................................................................55
Declaration of Conformity ...................................................................................55
CP_12000_Appliances_GettingStart10 10CP_12000_Appliances_GettingStart10 10 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Page 11
Chapter 1
Introduction
In This Chapter
Welcome 11
Check Point 12000 Appliances Overview 11
Shipping Carton Contents 12
Terminology 13
Welcome
Thank you for choosing Check Point 12000 Appliances. We hope that you will be satisfied with
this system and our support services. Check Point products provide your business with the
most up to date and secure solutions available today.
Check Point also delivers worldwide technical services including educational, professional and
support services through a network of Authorized Training Centers, Certified Support Partners
and Check Point technical support personnel to ensure that you get the most out of your
security investment.
For additional information on the Internet Security Product Suite and other security solutions,
refer to the Check Point Web site (http://www.checkpoint.com), or call Check Point at 1(800)
429-4391. For additional technical information about Check Point products, consult the Check
Point Support Center (http://supportcenter.checkpoint.com).
Welcome to the Check Point family. We look forward to meeting all of your current and future
network, application and management security needs.
Check Point 12000 Appliances
Overview
The family of Check Point 12000 Appliances enables organizations to maximize security in
high-performance environments such as large campuses or data centers. Combining integrated
firewall, IPSec VPN, and intrusion prevention with advanced acceleration technologies, Check
CP_12000_Appliances_GettingStart11 11CP_12000_Appliances_GettingStart11 11 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Shipping Carton Contents
Page 12
Point 12000 Appliances deliver a high-performance security platform capable of blocking
application layer threats. Even as new threats appear, Check Point 12000 Appliances maintain
or increase performance while protecting the network against attacks.
Key Features:
xProven, enterprise-class firewall, VPN, and intrusion prevention
xAccelerated security performance, including SecureXL and CoreXL technologies
xIntegrated load balancing and dynamic routing for data center reliability levels
xCentrally managed from Security Management Server/Check Point 12000 Appliances or as
a stand alone device
xAutomatic security protection updates from SmartDefense Services
This document provides:
xA brief overview of essential Check Point 12000 Appliances concepts and features
xA step by step guide to getting Check Point 12000 Appliances up and running
Note - Screenshots in this guide may apply only to the highest model
to which this guide applies.
Shipping Carton Contents
This section describes the contents of the shipping carton.
Item
Description
Appliance
Check Point 12000 appliance
Rack Mounting Accessories
Hardware mounting kit
Cables
xPower cable
x1 Standard RJ-45 network cable
x1 Serial console cable
Documentation
xQuick Start Guide
xGetting Started Guide
xImage Management Guide
xUser license agreement
CP_12000_Appliances_GettingStart12 12CP_12000_Appliances_GettingStart12 12 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Terminology
Introduction Page 13
Terminology
The following terms are used in this guide:
xGateway7KHVHFXULW\HQJLQHWKDWHQIRUFHVWKHRUJDQL]DWLRQ¶VVHFXULW\SROLF\DQGDFWVDVDsecurity enforcement point.
xSecurity Policy: The policy created by the system administrator that regulates the flow of
incoming and outgoing communication.
xSecurity Management Server: The server used by the system administrator to manage
WKHVHFXULW\SROLF\7KHRUJDQL]DWLRQ¶VGDWDEDVHVDQGVHFXULW\SROLFLHVDUHVWRUHGon the
Security Management Server and downloaded to the gateway.
xSmartConsole: GUI applications that are used to manage various aspects of security
policy enforcement. For example, SmartView Tracker is a SmartConsole application that
manages logs.
xSmartDashboard: A SmartConsole GUI application that is used by the system
administrator to create and manage the security policy.
xLocally Managed Deployment: The appliance is a Security Gateway and a Security
Management server. The Security Management server manages the Security Policy that is
enforced by the Security Gateway.
xCentrally Managed Deployment: The appliance is a Security Gateway, without a Security
Management server. The Security Gateway is managed by a remote Security Management
server.
CP_12000_Appliances_GettingStart13 13CP_12000_Appliances_GettingStart13 13 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

CP_12000_Appliances_GettingStart14 14CP_12000_Appliances_GettingStart14 14 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Page 15
Chapter 2
Rack Mounting
This chapter describes how to mount the appliance in a rack.
Important - Two people are required to install the appliance in a rack in order to prevent
any possible damage.
In This Chapter
Rack Mounting Hardware and Tools 15
Rack Mounting Check Point 12200 16
Rack Mounting Check Point 12400 and 12600 21
Rack Mounting Hardware and Tools
You must install rack mounting hardware on the appliance before you can mount it in a rack.
This table describes the rack mounting hardware.
Note - Screws to attach the ear mount brackets and rail plates to the rack are not
included.
Hardware Description
Qty.
Use
Ear mount bracket
2
Attaches to the appliance front panel. Both ear mount brackets
are identical.
Ear mount screws
6
Secures the ear mount brackets to the appliance front panel.
Appliance rail
2
Attaches to the appliance. Both rails are identical.
Rail plates
2
Attaches to the appliance rails. Both plates are identical.
Appliance rail screws
14
Secures the rail plates to the appliance rails and the rails to
the appliance.
CP_12000_Appliances_GettingStart15 15CP_12000_Appliances_GettingStart15 15 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Rack Mounting Check Point 12200
Page 16
Rack Mounting Tools
xPhilips screwdriver. A magnetic head is recommended to hold screws in place and retrieve
dropped screws. A powered screwdriver is also useful.
Rack Mounting Check Point 12200
Attaching the Ear Mount Brackets to the Appliance
Attach the two ear mount brackets to the front of the appliance.
Note - The ear mount screws have 5 mm heads.
To attach the ear mount brackets to the appliance:
1. Attach the appliance ear bracket to one side of the appliance using three ear mount screws.
2. Do step 1 again for the other side of the appliance.
CP_12000_Appliances_GettingStart16 16CP_12000_Appliances_GettingStart16 16 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Rack Mounting Check Point 12200
Rack Mounting Page 17
Attaching the Rail Plates
Attach the rail plates to the appliance rails to connect the appliance to the rear vertical rails of
the rack.
Item
Description
1
Appliance rail
2
Rail plate
Note - The appliance rail screws have 8 mm heads.
To attach the rail plates:
1. Attach a rail plate to an appliance rail using two appliance rail screws.
2. Do step 1 again for the other rail plate and appliance rail.
CP_12000_Appliances_GettingStart17 17CP_12000_Appliances_GettingStart17 17 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Rack Mounting Check Point 12200
Page 18
This figure shows the assembled rail plate and appliance rail.
Attaching the Appliance Rails to the Appliance
Attach the appliance rails to the sides of the appliance. Position the rail plates to connect the
appliance rails to the rear of the rack.
Note - The appliance rail screws have 8 mm heads.
CP_12000_Appliances_GettingStart1 1CP_12000_Appliances_GettingStart1 1 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Rack Mounting Check Point 12200
Rack Mounting Page 19
To attach the appliance rails:
1. Set the appliance rail on the side of the appliance. The ridges on the appliance rails point to
the appliance. This diagram shows the appliance rail and rail plate positioned correctly:
2. Attach the appliance rails to the appliance using three appliance rail screws.
3. Do steps 1 and two again for the other side of the appliance.
CP_12000_Appliances_GettingStart19 19CP_12000_Appliances_GettingStart19 19 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM

Rack Mounting Check Point 12200
Page 20
Installing the Appliance in the Rack
Install the appliance in the rack. It may be necessary to adjust the appliance rails to secure the
appliance to the rack.
Important - Two people are required to install the appliance in a rack in order to prevent
personal injury or damage to the appliance.
To install the appliance in the rack:
1. Attach the ear mount brackets to the front of the rack.
2. Attach the rail plates to the rear of the rack.
3. Confirm that the appliance is stable and secure in the rack.
CP_12000_Appliances_GettingStart20 20CP_12000_Appliances_GettingStart20 20 20 July 2011 4:04:33 PM20 July 2011 4:04:33 PM