Checkpoint 1500 Series Instruction Manual

Models: V-80, V-80W, V-81, V-81W, V-81WL, V-81WD, V-81R, V-81WLR [Classification: Protected]
21 April2021
1500 APPLIANCE SERIES
R80.20.15
Centrally Managed
Administration Guide

Check Point Copyright Notice
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 2
Check Point Copyright Notice
© 2020 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed
under licensing restricting their use, copying, distribution, and decompilation. No part of this product or
related documentation may be reproduced in any form or by any means without prior written authorization
of Check Point. While every precaution has been taken in the preparation of this book, Check Point
assumes no responsibility for errors or omissions. This publication and features described herein are
subject to change without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)
(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page for a list of our trademarks.
Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 3
Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the
latest functional improvements, stability fixes, security enhancements and protection
against new and evolving attacks.
Certifications
For third party independent certification of Check Point products, see the Check Point
Certifications page.
Check Point R80.20.15
For more about this release, see the R80.20.15 home page.
Latest Version of this Document in English
Open the latest version of this document in a Web browser.
Download the latest version of this document in PDF format.
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments.
Revision History
Date Description
21 April 2021 Updated
"Configuring MAC Filtering" on page110 and "SNMP" on page169
12 January 2021 Updated Allowed Password Characters
16 November 2020 Fixed link for homepage
18 October 2020 First release of this document

Table of Contents
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 4
Table of Contents
Check Point 1500 Appliance Series Overview
9
Setting up the Check Point Appliance
10
Connecting the Cables
10
Deployment Types
11
Predefining a Centrally Managed Deployment
12
Small-scale Deployment Installation
13
Defining a Gateway Object
13
Defining a Gateway Cluster Object
17
Workflow
17
Creating a Cluster for New Gateways
18
Converting an Existing Check Point Appliance to a Cluster
23
Viewing Cluster Status in the WebUI
24
Creating the Security Policy
25
Working with Security Zone Objects
25
Installing a Security Policy
26
Viewing the Policy Installation Status
27
Setting Server IP Address Behind a 3rd Party NAT Device
29
Large-scale Deployment Installation
30
Supported Security Management Versions
30
Large-scale Deployment Workflow
30
Defining a SmartLSM Gateway Profile for a Large-scale Deployment
30
Defining a SmartLSM Appliance Cluster Profile
31
Deploying with SmartProvisioning
32
Installing a Security Policy
33
Viewing the Policy Installation Status
33
SmartProvisioning
36
Creating a Gateway
36
General Properties
36
More Information
36
Communication Properties
37

Table of Contents
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 5
VPN Properties
38
Finish
38
Updating the Corporate Office Gateway
38
Creating a SmartLSM Appliance Cluster
39
General Properties
39
Cluster Properties
39
Cluster Names
39
More Information
40
Communication Properties
40
VPN Properties
40
Finish
40
Defining SmartLSM Gateways Using LSM CLI
41
Managing Device Settings
42
Configuring Firmware
42
Configuring RADIUS
45
Configuring Hotspot
46
Configuring a Configuration Script
46
Configuring a Provisioning Profile
47
First Time Deployment Options
49
Zero Touch Cloud Service
50
Deploying from a USB Drive or SD Card
51
Sample Configuration File
51
Preparing the Configuration Files
51
Deploying the Configuration File - Initial Configuration
52
Deploying the Configuration File - Existing Configuration
53
Viewing Configuration Logs
53
Troubleshooting Configuration Files
54
Configuration File Error
54
Suggested Workflow - Configuration File Error
54
Sample Configuration Log with Error
55
Using the set property Command
55
Appliance Configuration
56
The Home Tab
57

Table of Contents
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 6
Viewing System Information
57
Controlling and Monitoring Software Blades
58
Setting the Management Mode
60
Configuring Cloud Services
63
Managing Licenses
66
Viewing the Site Map
68
Managing Active Devices
69
Viewing Monitoring Data
71
Network
71
Troubleshooting
72
Viewing Reports
73
Using System Tools
75
Managing the Device
77
Configuring Internet Connectivity
77
Configuring the Internet Connectivity
77
The 'Configuration' tab
77
Creating a New Bond (WAN)
79
Configuring a USB Connection
80
Configuring an LTE Internet Connection (WiFi-LTE models only)
80
The 'Connection Monitoring' tab
82
The 'Advanced' tab
83
Monitoring
85
Configuring Wireless Network
87
Configuring the Local Network
92
Reserved IP Address for Specific MAC
93
Switch
93
Monitor Mode
94
Physical Interfaces
96
Bridge
97
VLANs
98
VPN Tunnel (VTI)
99
Virtual Access Point (VAP)
100
BOND
102

Table of Contents
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 7
Configuring a Hotspot
104
Configuring the Routing Table
107
Configuring MAC Filtering
110
Configuring the DNS Server
112
Configuring the Proxy Server
113
Backup, Restore, Upgrade, and Other System Operations
114
Using the Software Upgrade Wizard
116
Welcome
116
Upload Software
117
Upgrade Settings
117
Upgrading
117
Backing up the System
117
Configuring Local and Remote System Administrators
119
Configuring Administrator Access
125
Managing Device Details
127
Managing Date and Time
128
Configuring DDNS and Access Service
129
DDNS
129
Reach My Device
129
Remote Access to the WebUI
130
Remote Access to the CLI
130
Using System Tools
131
Managing Internal Certificates
132
Configuring High Availability
134
Advanced Settings
135
Managing Users and Objects
137
Working with User Awareness
137
Configuring Local Users and User Groups
138
Configuring Local and Remote System Administrators
140
Managing Authentication Servers
146
Managing Applications & URLs
147
Managing System Services
149
Managing Service Groups
151

Table of Contents
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 8
Managing Network Objects
152
Updatable Objects
154
Managing Network Object Groups
155
Logs and Monitoring
156
Viewing Security Logs
156
Viewing System Logs
158
Configuring External Log Servers
159
Secured Syslog
159
Managing Active Devices
161
Wireless Active Devices
162
Viewing VPN Tunnels
163
Viewing Active Connections
164
Access Points
165
Viewing Monitoring Data
166
Viewing Reports
167
Using System Tools
168
SNMP
169
SNMP Traps Receivers
170
SNMP Traps
170
SNMP Traps for VPNTunnels
170
SNMPTraps for Hardware Sensors
170
Advanced Configuration
172
Upgrade Using a USB Drive
172
Upgrade Using an SD Card
173
Boot Loader
174
Upgrade Using Boot Loader
175
Restoring Factory Defaults
176

Check Point 1500 Appliance Series Overview
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 9
Check Point 1500 Appliance Series
Overview
Check Point 1500 appliance series includes the 1530, 1550, 1570, 1590, and 1570R appliances. These
appliances support the Check Point Software Blade architecture and provide independent modular and
centrally managed security building blocks. You can quickly enable and configure the Software Blades to
meet your specific security needs.
Check Point 1530, 1550, 1570, 1590, and 1570R appliances deliver integrated unified threat management
to protect your organization from today's emerging threats. Based on proven Check Point security
technologies such as Stateful Inspection, Application Intelligence, and SMART (Security Management
Architecture), the appliances provides simplified deployment while delivering uncompromising levels of
security.
These appliances run an embedded version of the Gaia operating system. The appliances include core
configuration elements such as clish interface, SNMPv2/3 and routing stack implementations. In addition
to the Gaia features, Embedded Gaia contains support for built-in network switches, wireless networks, 4G
LTE Internet connectivity, multiple Internet connections (more than 2) in High Availability or Load Sharing
mode, Policy Based Routing, and DDNS support. Quick deployment with USB is supported for all
appliances, and with SD card and Dual SIM card for the 1570 / 1590 appliances. For more information, see
the 1500 appliance series product page.
This guide describes all aspects that apply to the Check Point 1530 / 1550 and 1570 / 1590 Appliances.
Note - Some topics only apply to specific appliances or models.
Appliance Model Appliance
Homepage
1530 / 1550 V-80 Wired, V-80W WiFi sk157412
1570 / 1590 V-81 Wired, V-81W WiFi, V-81WL WiFi-LTE, V-81WD WiFi-
DSL
sk157412
1570R V-81R, V-81WLR sk166654
For front, side, and back panel details for each appliance, see the relevant Getting Started Guide .
Review these materials before doing the procedures in this guide:
nR80.20.15 SMB Release Notes
nKnown Limitations
nResolved Issues
nGetting Started Guide
nSmall Business Security video channel
See the SMB R80.20.15 home page.

Setting up the Check Point Appliance
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 10
Setting up the Check Point
Appliance
To set up the Check Point 1530 / 1550, 1570 / 1590 and 1570R Appliance:
1. Remove the Check Point Appliance from the shipping carton and place it on a tabletop.
2. Identity the network interface marked as LAN1.
This interface is preconfigured with the IP address 192.168.1.1.
Connecting the Cables
To connect the cables:
1. Connect the power cable to the appliance. The appliance is connected directly to the power source.
1530 / 1550 appliances only: Turn on the power switch located on the back panel.
2. When the appliance is turned on, the Power LED on the front panel lights up in red for a short period.
The LED then turns blue and starts to blink. This shows a boot is in progress and firmware is being
installed.
When the LED turns a solid blue, the appliance is ready for login.
Note – The LED is red if there is an alert or error.
nIf you use an external modem:
Connect the Ethernet cable to the WAN port on the appliance back panel and plug it into your
external modem or router's PC/LAN network port. The Internet LED on the appliance front
panel lights up when the Ethernet is connected.
nIf you do not use an external modem:
Connect the telephone cable to the DSL port on the appliance back panel and plug it into the
DSL line socket. The DSL LED as well as the Internet Link LED remains off until you configure
the appliance, including setting up the DSL as an internet connection.
3. Connect the standard network cable to the LAN1 port on the appliance and to the network adapter
on your PC.
Note - Wait 10 seconds between power cycles (off and on).

Deployment Types
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 11
Deployment Types
There are two types of centrally managed deployments:
nSmall-scale deployment - Configure between 1 and 25 Check Point Appliance gateways using
SmartConsole. You can then manage device settings from SmartProvisioning.
nLarge-scale deployment - Configure over 25 Check Point Appliance gateways using a SmartLSM
profile and SmartProvisioning, or using a configuration file that is stored on a USB drive.
For both deployment types, you must configure objects and other elements in SmartConsole and in
SmartProvisioning.

Predefining a Centrally Managed Deployment
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 12
Predefining a Centrally Managed
Deployment
To manage the Check Point Appliance in a centrally managed deployment, you must install a Security
Management Server and SmartConsole that operate with the Check Point Appliance.
The Check Point Appliance operates with Security Management Server versions R80.30 with the R80.30
Jumbo Hotfix Accumulator, and higher.
For installation instructions, see the version's Release Notes.
After you install the SmartConsole, you can define the Check Point Appliance object in SmartConsole (in
small-scale deployments) or create a SmartLSM profile (in large-scale deployments) and prepare the
Security Policy.

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 13
Small-scale Deployment Installation
This chapter contains procedures for defining a gateway on a gateway cluster in SmartConsole.
Do the procedures that match your requirements, then install the policy.
Defining a Gateway Object
Options to define a gateway object:
nManagement First
Define the gateway object in SmartConsole before you configure and set up the actual appliance on
site. This is commonly used for remotely deployed appliances or appliances that connect to the
Security Management Server with a dynamic IP address (assigned by a DHCP server or an ISP), as
the IP address is not known at the time of the configuration of the object in SmartConsole. You can
prepare a policy that the appliance pulls when it is configured.
Workflow:
1. In SmartConsole:
a. Create the required objects and configure the required settings:
Before you enable the IPSec VPN Software Blade, you must configure the VPN
community and optionally, a VPN domain.
b. Create the necessary gateway or cluster objects for your appliances.
c. Install the Security Policy on the gateway object.
2. Configure the appliance with the First Time Configuration Wizard.
Alternatively, you can use a USB drive to quickly configure many appliances without the First
Time Configuration Wizard.
For more details, see "Deploying from a USB Drive or SD Card" on page51 .
3. In SmartProvisioning, manage the gateway object settings.

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 14
nGateway First
Configure and set up the appliance first. It then tries to communicate with the Security Management
Server (if this is configured) at 1 hour intervals. If there is connectivity with the gateway during object
creation in SmartConsole, the wizard can retrieve data from the gateway (such as topology), and
then help in configuration.
Workflow:
1. Configure the relevant appliances with the First Time Configuration Wizard.
Alternatively, you can use a USB drive to quickly configure many appliances without the First
Time Configuration Wizard.
For more details, see "Deploying from a USB Drive or SD Card" on page51 .
2. In SmartConsole:
a. Create the required objects and configure the required settings:
Before you enable the IPSec VPN Software Blade, you must configure the VPN
community and optionally, a VPN domain.
b. Create the necessary gateway or cluster objects for your appliances.
c. Install the Security Policy on the gateway object.
3. In SmartProvisioning, manage the gateway object settings.
To define a single gateway object:
1. Connect with SmartConsole to the Security Management Server.
2. From the Objects menu, click More object types >Network Object >Gateways and Servers >
New Gateway.
The Check Point Security Gateway Creation window opens.
3. Click Wizard Mode.
4. On the General Properties page:
a. In the Gateway name field, enter a name for the Security Gateway object.
b. In the Gateway platform field, select the correct appliance series for the Check Point
appliance.
c. The Version field automatically shows R80.20.
d. In the Platform Type field, select the correct appliance type for the Check Point appliance.
e. Configure the IP address for the Check Point appliance in one of these ways:
nSelect Static IP address and enter the IP address.
nSelect Dynamic IP address to get the gateway's IP address from a DHCP server.
f. Click Next.

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 15
5. On the Trusted Communication page, configure how the Security Management Server and the
Check Point appliance authenticate each other and click Next:
nIf on the previous General Properties page you selected Static IP address:
a. In the Authentication section, select Initiate trusted communication securely by
using a one-time password or Initiate trusted communication without
authentication (less secure).
b. If you selected Initiate trusted communication securely by using a one-time
password, enter a one-time password and confirm it.
This password is only used to establish the initial trust. After it is established, trust is
based on security certificates.
Important - This password must be identical to the one-time
password you define for the appliance in the First Time
Configuration Wizard.
c. In the Trusted Communication section, select Initiate trusted communication
automatically when the Gateway connects to the Security Management server for
the first time or Initiate trusted communication now.
d. Click Connect.
A status window appears.
nIf on the previous General Properties page you selected Dynamic IP address:
a. In the Gateway Identifier section, select one identifier: Gateway name,MAC
address, or First to connect.
b. In the Authentication section, select Initiate trusted communication securely by
using a one-time password or Initiate trusted communication without
authentication (less secure).
c. If you selected Initiate trusted communication securely by using a one-time
password, enter a one-time password and confirm it.
This password is only used for establishing the initial trust. After it is established, trust is
based on security certificates.
Important - This password must be identical to the one-time
password you define for the appliance in the First Time
Configuration Wizard.
6. On the Blade Activation page, select Activate and configure software blades now or Activate
and configure software blades later.
If you selected Activate and configure software blades now:
a. Select the check boxes next to the Software Blades you want to activate.
b. Click Next.

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 16
7. On the Blade Configuration page, configure the required options and click Next:
Note - This page appears only if on the previous Blade Activation page you selected Activate and
configure software blades now.
nNAT - The Hide internal networks behind the Gateway's external IP checkbox is selected
by default.
nIPSec VPN - In the Participate in a site to site community field, select a VPN community
that this gateway participates in (you must create this VPN community before you start the
wizard). If it is a star community, this gateway becomes a VPN satellite gateway.
nQoS - Select the applicable inbound and outbound bandwidth rates.
8. On the VPN Domain page, configure the VPN Encryption Domain settings and click Next:
Note - This page appears only if on the previous Blade Activation page you selected the IPSec
VPN Software Blade.
Available options:
nHide VPN domain behind this gateway's external IP
Select this option only if you want to hide all internal networks behind this gateway's external
IP. All outgoing traffic from networks behind this gateway to other sites that participate in VPN
community is encrypted.
With this option, connections that are initiated from other sites that are directed to hosts
behind this gateway are not encrypted. If you need access to hosts behind this gateway,
select other options (define VPN topology) or make sure all traffic from other sites is directed
to this gateway's external IP address and define corresponding NAT port-forwarding rules,
such as: translate the destination of incoming HTTP connections that are directed to this
gateway's external IP address to the IP address of a web server behind this gateway.
nCreate a new VPN domain
a. In the Name field, enter a name for the group.
b. From the Available objects list, select the applicable objects and click Add. The
objects are added to the VPN domain members list.
Note - To select multiple separate objects, press and hold the Ctrl key while you click
them. To select multiple adjacent objects, press and hold the Shift key while you click
the first and the last of them.
nSelect an existing VPN domain
You must create this VPN domain before you start the wizard.
9. On the Installation Wizard Completion page:
You see a summary of the configuration parameters you set.
If you want to configure more options of the Security Gateway, select Edit Gateway properties for
further configuration.
Click Finish.
10. The General Properties window of the newly defined object opens.
Configure the applicable settings and click OK.
11. Install the Security Policy on the gateway object.

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 17
Defining a Gateway Cluster Object
A Check Point appliance Security Gateway cluster is a group of two members. Each represents a separate
Check Point appliance which has High Availability software installed. ClusterXL is the Check Point
clustering solution. Third party OPSEC Certified clustering products are not supported.
High Availability
High Availability allows organizations to maintain a connection when there is a failure in a cluster member.
Only one machine is active (Active/Standby operation) in this configuration. Load sharing is not supported
on this appliance.
Prerequisites
You must first configure and set up the two gateways with their actual IP addresses. Only afterward you
can create the cluster object in SmartConsole or SmartProvisioning. The policy installation from the
Security Management Server alerts the gateways that they are configured as cluster members.
Workflow
1. Do not connect the two Check Point appliances to the power source.
2. Connect the required cables.
3. On the first appliance:
a. Turn it on.
b. Configure it with the First Time Configuration Wizard.
c. Reboot it.
d. Shut it down.
Note - If you do not follow these instructions, you cannot use the https://my.firewall URL correctly
and you need to connect with the gateway's actual IP address. (That IP address is initially
192.168.1.1 on LAN1 before you change it on the Check Point appliance).
4. On the second appliance:
a. Turn it on.
b. Configure it with the First Time Configuration Wizard.
c. Reboot it.
5. Turn on the first appliance.
6. In SmartConsole:
a. Configure the cluster object.
b. Install the Security Policy on the cluster object.
7. In SmartProvisioning, manage the appliance settings for the cluster object.

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 18
Creating a Cluster for New Gateways
Note - See your Check Point appliance Getting Started Guide for full instructions to set up and connect the
Check Point appliance.
The configuration procedure consists of two parts:
1. Initial configuration of two new Check Point appliance gateways
2. Creating and configuring a cluster object
Part 1 - Initial configuration of two new Check Point appliance gateways:
1. Do not connect the two Check Point appliances to the power source.
2. Connect the required cables to the two Check Point appliances and between them.
3. Connect the first Check Point appliance to the power source and turn it on.
4. Connect your computer to the first Check Point appliance to the LAN1 interface.
5. Configure your computer to get an IP address automatically.
6. With a web browser on your computer connect to: https://my.firewall

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 19
7. Follow the steps to configure the first Check Point appliance with the First Time Configuration
Wizard.
Important:
nThe WAN interface:
When you create the cluster object in SmartConsole in Wizard Mode, it
assumes that the WAN interface is part of the cluster.
Make sure the WAN interfaces on the two appliances are configured with
a static IP address of a matching subnet.
nThe cluster SYNC interface:
lUse an Ethernet cross-cable to connect SYNC interfaces on the
two appliances.
lBy default, the LAN2 interfaces are used for cluster
synchronization.
lIt is not necessary to configure an IP address on the LAN2 interface
at any stage of the gateway side configuration.
If you do not configure an IP address on the LAN2 interface, the IP
addresses of the SYNC interfaces are automatically set to
10.231.149.1 and 10.231.149.2.
lIf you manually configure IP addresses on the SYNC interfaces,
you must configure these IP addresses to be on the same subnet.
lYou can use a different SYNC interface other than LAN2. For more
information, see sk52500.
nTo configure IP addresses on interfaces other than WAN and LAN1, do
so in each gateway's WebUI - on the Internet or Local Network pages.
Make sure that for each interface that is part of the cluster, you configure
an IP address in the same subnet as the peer cluster member.
nOne-time password:
lRemember this one-time password. You need it to configure the
cluster object in SmartConsole.
lThe one-time password must be the same on the two cluster
members to create the cluster object in Wizard Mode.
lIf the one-time password is not the same on the two cluster
members, you must create the cluster object in Classic Mode.
8. Reboot the first Check Point appliance.
9. Shut down the first Check Point appliance.
10. Connect the second Check Point appliance to the power source and turn it on.
11. Connect your computer to the second Check Point appliance to the LAN1 interface.
12. Renew the dynamic IP address on your computer.
13. With a web browser on your computer connect to: https://my.firewall

Small-scale Deployment Installation
1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 20
14. Follow the steps to configure the second Check Point appliance with the First Time Configuration
Wizard.
Important:
nThe WAN interface:
When you create the cluster object in SmartConsole in Wizard Mode, it
assumes that the WAN interface is part of the cluster.
Make sure the WAN interfaces on the two appliances are configured with
a static IP address of a matching subnet.
nThe cluster SYNC interface:
lUse an Ethernet cross-cable to connect SYNC interfaces on the
two appliances.
lBy default, the LAN2 interfaces are used for cluster
synchronization.
lIt is not necessary to configure an IP address on the LAN2 interface
at any stage of the gateway side configuration.
If you do not configure an IP address on the LAN2 interface, the IP
addresses of the SYNC interfaces are automatically set to
10.231.149.1 and 10.231.149.2.
lIf you manually configure IP addresses on the SYNC interfaces,
you must configure these IP addresses to be on the same subnet.
lYou can use a different SYNC interface other than LAN2. For more
information, see sk52500.
nTo configure IP addresses on interfaces other than WAN and LAN1, do
so in each gateway's WebUI - on the Internet or Local Network pages.
Make sure that for each interface that is part of the cluster, you configure
an IP address in the same subnet as the peer cluster member.
nOne-time password:
lRemember this one-time password. You need it to configure the
cluster object in SmartConsole.
lThe one-time password must be the same on the two cluster
members to create the cluster object in Wizard Mode.
lIf the one-time password is not the same on the two cluster
members, you must create the cluster object in Classic Mode.
15. Reboot the second Check Point appliance.
16. Turn on the first Check Point appliance (connect it to the power source).
Part 2 - Creating and configuring a cluster object
1. Connect with SmartConsole to the Security Management Server.
2. From the Objects menu, click More object types >Network Object >Gateways and Servers >
New Small Office Cluster.
The Check Point Security Gateway Cluster Creation window opens.
3. Click Wizard Mode.