Checkpoint 21000 Appliances G-70 User manual

20 February 2013
Getting Started Guide
21000 Appliances
Models: G-72, G-70 & G-50
Classification: [Protected] P/N 705215

© 2013 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed under
licensing restricting their use, copying, distribution, and decompilation. No part of this product or related
documentation may be reproduced in any form or by any means without prior written authorization of Check
Point. While every precaution has been taken in the preparation of this book, Check Point assumes no
responsibility for errors or omissions. This publication and features described herein are subject to change
without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks.
Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of
relevant copyrights and third-party licenses.

Contents
Important Information.............................................................................................v
Health and Safety Information ...............................................................................6
Introduction.............................................................................................................8
Welcome............................................................................................................. 8
Overview of the 21000 Appliances ...................................................................... 8
Shipping Carton Contents.................................................................................... 9
Rack Mounting with Telescoping Rails...............................................................10
General Requirements for Racks........................................................................10
Telescoping Rails Hardware...............................................................................11
Attaching the Appliance Rails.............................................................................12
Attaching the Rack Rails ....................................................................................12
Installing the Appliance.......................................................................................13
Removing the Appliance.....................................................................................15
21000 Appliances Hardware.................................................................................16
Front Panel Components....................................................................................16
Check Point 21700 and 21600 Front Panel....................................................16
Check Point 21700 and 21600 Front Panel LEDS .........................................17
Check Point 21400 Front Panel.....................................................................18
Check Point 21400 Front Panel LEDS...........................................................19
Managing 21000 Appliances Using the LCD Panel........................................20
Line Cards.....................................................................................................21
Rear Panel Components ....................................................................................22
21000 Appliances Rear Panel........................................................................22
21700 and 21600 - Securing the Power Cable...............................................23
Replacing and Upgrading Components..............................................................25
Software Configuration ........................................................................................26
Connecting the Power Cables and Power On.....................................................26
Available Software Images.................................................................................26
Initial Configuration.............................................................................................26
Using the First Time Configuration Wizard on Gaia............................................27
Starting the Gaia First Time Configuration Wizard.........................................27
Welcome........................................................................................................27
Available Releases ........................................................................................27
Authentication Details....................................................................................27
Date and Time Setup.....................................................................................28
Device Name.................................................................................................28
Network Connection.......................................................................................28
Products ........................................................................................................29
Security Management Administrator..............................................................30
Security Management GUI Clients.................................................................30
License Activation..........................................................................................30
Dynamically Assigned IP ...............................................................................30
Secure Internal Communication (SIC)............................................................30
Summary.......................................................................................................30
Using the First Time Configuration Wizard on SecurePlatform ...........................31
Starting the First Time Configuration Wizard..................................................31
Welcome........................................................................................................31
Appliance Date and Time Setup ....................................................................31
Network Connections.....................................................................................32
Routing Table ................................................................................................32
Host, Domain Settings, and DNS Servers......................................................32
Management Type.........................................................................................32

Summary.......................................................................................................33
Creating the Network Object...............................................................................33
Advanced Configuration.....................................................................................34
Connecting to the 21000 Appliances CLI.......................................................34
Restoring Factory Defaults..................................................................................35
Restoring Using the WebUI................................................................................35
Gaia...............................................................................................................35
SecurePlatform..............................................................................................35
Restoring Using the Console Boot Menu............................................................35
Restoring Using the LCD Panel..........................................................................37
Registration and Support.....................................................................................38
Registration........................................................................................................38
Support...............................................................................................................38
Where To From Here?........................................................................................38
Compliance Information.......................................................................................39
Declaration of Conformity...................................................................................39

Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the latest functional
improvements, stability fixes, security enhancements and protection against new and evolving attacks.
Latest Documentation
The latest version of this document is at:
http://supportcontent.checkpoint.com/documentation_download?ID=12317
For additional technical information, visit the Check Point Support Center
(http://supportcenter.checkpoint.com).
For more about this appliance, see the 21000 Appliances home page
(http://supportcontent.checkpoint.com/solutions?id=sk68701).
Revision History
Date
Description
20 February 2013
Added 21700 appliance
16 October 2012
Added 21600 appliance
Added First Time Configuration Wizard for Gaia
Added Rack Mounting for Telescoping Rails
Deleted Customer Replaceable Parts
1 November 2011
Deleted a statement about Proposition 65 Chemicals from the
Health and Safety Information (on page 6).
Added photos to the instructions for Installing and Removing
the System Board Battery and for Installing and Removing a
LOM card.
1 August 2011
First release of this document
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments
(mailto:[e-mail]?subject=Feedback on 21000 Appliances Getting Started
Guide).

Health and Safety Information
21000 Appliances Getting Started Guide | 6
Health and Safety Information
Note - The Check Point 21000 Appliances correlate with the following model
numbers for certification purposes: G72, G70, and G50.
Read the following warnings before setting up or using the appliance.
Warning - Do not block air vents. A minimum 1/2-inch clearance is required.
To prevent damage to any system board, it is important to handle it with care. The following measures are
generally sufficient to protect your equipment from static electricity discharge:
When handling the board, to use a grounded wrist strap designed for static discharge elimination.
Touch a grounded metal object before removing the board from the antistatic bag.
Handle the board by its edges only. Do not touch its components, peripheral chips, memory modules or
gold contacts.
When handling processor chips or memory modules, avoid touching their pins or gold edge fingers.
Restore the communications appliance system board and peripherals back into the antistatic bag when
they are not in use or not installed in the chassis. Some circuitry on the system board can continue
operating even though the power is switched off.
Under no circumstances should the lithium battery cell used to power the real-time clock be allowed to
short. The battery cell may heat up under these conditions and present a burn hazard.
Warning - DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY
REPLACED. REPLACE ONLY WITH SAME OR EQUIVALENT TYPE
RECOMMENDED BY THE MANUFACTURER. DISCARD USED BATTERIES
ACCORDING TO THE MANUFACTURER’S INSTRUCTIONS.
Disconnect the system board power supply from its power source before you connect or disconnect
cables or install or remove any system board components. Failure to do this can result in personnel
injury or equipment damage.
Avoid short-circuiting the lithium battery; this can cause it to superheat and cause burns if touched.
Do not operate the processor without a thermal solution. Damage to the processor can occur in
seconds.
CLASS 1 LASER PRODUCT. A TOTALLY ENCLOSED LASER SYSTEM CONTAINING A CLASS 1
LASER.
For California:
Perchlorate Material - special handling may apply. See http://www.dtsc.ca.gov/hazardouswaste/perchlorate
The foregoing notice is provided in accordance with California Code of Regulations Title 22, Division 4.5,
Chapter 33. Best Management Practices for Perchlorate Materials. This product, part, or both may include a
lithium manganese dioxide battery which contains a perchlorate substance.
WARNING:
Handling the cord on this product will expose you to lead, a chemical known to the State of California to
cause cancer, and birth defects or other reproductive harm. Wash hands after handling.
Information to user:
The user's manual or instruction manual for an intentional or unintentional radiator shall caution the user that
changes or modifications not expressly approved by the party responsible for compliance could void the
user's authority to operate the equipment. In cases where the manual is provided only in a form other than
paper, such as on a computer disk or over the Internet, the information required by this section may be
included in the manual in that alternative form, provided the user can reasonably be expected to have the
capability to access information in that form.

Health and Safety Information
21000 Appliances Getting Started Guide | 7
Product Disposal
This symbol on the product or on its packaging indicates that this product must not be disposed of with your
other household waste. Instead, it is your responsibility to dispose of your waste equipment by handing it
over to a designated collection point for the recycling of waste electrical and electronic equipment. The
separate collection and recycling of your waste equipment at the time of disposal will help to conserve
natural resources and ensure that it is recycled in a manner that protects human health and the
environment. For more information about where you can drop off your waste equipment for recycling, please
contact your local city office or your household waste disposal service.

21000 Appliances Getting Started Guide | 8
Chapter 1
Introduction
In This Chapter
Welcome 8
Overview of the 21000 Appliances 8
Shipping Carton Contents 9
Welcome
Thank you for choosing Check Point’s 21000 Appliances. We hope that you will be satisfied with this system
and our support services. Check Point products are the most up to date and secure solutions available
today.
Check Point also delivers worldwide educational, professional and support services through a network of
Authorized Training Centers, Certified Support Partners and Check Point technical support personnel. We
make sure that you get the most out of your security investment.
For more about the Internet Security Product Suite and other security solutions, see the Check Point Web
site (http://www.checkpoint.com), or call Check Point at 1(800) 429-4391. For more technical information
about Check Point products, consult the Check Point Support Center (http://supportcenter.checkpoint.com).
Welcome to the Check Point family. We look forward to meeting all of your current and future network,
application and management security needs.
Overview of the 21000 Appliances
The Check Point 21000 Appliances models are ideally suited for securing medium to large data center
environments and high-end enterprise networks. The 21000 Appliances models are purpose-built Security
Gateways in a compact 2U form factor. The acceleration options extend firewall throughput up to 100 Gbps
with significantly lower packet latency.
The 21000 Appliances models remove complexity with central management of security protection services
on one platform. With the Check Point security-leading Software Blades technology, these appliances can
provide: VPN, IPS, Application Control, Mobile Access, Application and URL Filtering, DLP, Anti-Virus &
Anti-Malware, Web Security and Anti-Spam & Email Security.
The 21000 Appliances models are highly modular, for greater scalability and flexibility. Up to 36 I/O ports are
available with the optional 12x1GbE copper and fiber (SFP) Network Interface Cards. For 10GbE network
connectivity, an optional 4x10GbE fiber (SFP+) module is also available. This makes the 21000 Appliances
ideal for demanding network environments, and for securing many different networks.
The 21000 Appliances models deliver high serviceability and redundancy for these components that you can
hot-swap: dual power-supplies, system fans, and dual hard-disk drive with RAID support. Accessories
include NICs, memory upgrades and a LOM (Lights-Out Management) card module for out-of-band
management.
This appliance supports the SecurePlatform and Gaia Operating Systems. Gaia is a single, unified network
security Operating System that combines the best of Check Point's SecurePlatform and IPSO, the operating
system from the Nokia security products. Gaia supports the full portfolio of Check Point Software Blades,
Security Gateway and Security Management products.
For more about installing and using 21000 Appliances, see the appliance home page
(http://supportcontent.checkpoint.com/solutions?id=sk68701).

Introduction
21000 Appliances Getting Started Guide | 9
Shipping Carton Contents
Item
Description
Check Point 21000 appliance
A single appliance
21000 appliance components *
1 1GbE copper line card, 12 ports
2 front-facing slots for optional line cards
16 GB dynamic RAM (21700 and 21600 Appliance)
12 GB dynamic RAM (21400 Appliance)
2 hard disk drives with RAID
2 power supplies
Full complement of fans units (quantity 5)
Rack mounting accessories
Hardware mounting kit
Cables
2 power cables
Documentation
Quick Start Guide
Image Management guide
User License Agreement
*Check Point product bundles can have special appliance components. See the Check Point Website
Product Catalog to learn about these special product configurations. It is necessary to log in to the Product
Catalog (http://supportcenter.checkpoint.com).

21000 Appliances Getting Started Guide | 10
Chapter 2
Rack Mounting with Telescoping
Rails
In This Chapter
General Requirements for Racks 10
Telescoping Rails Hardware 11
Attaching the Appliance Rails 12
Attaching the Rack Rails 12
Installing the Appliance 13
Removing the Appliance 15
This chapter describes how to use telescoping rails to mount the appliance in a rack.
Note - There are two versions of rails that are shipped with the 21000 Appliances:
Original rack mounting
Newer rack mounting
The newer rails come with the L-shaped bracket attached at both ends of the rails. If you
are installing the original rails (without the L-shaped brackets attached), go to 21000
Appliances home page (http://supportcontent.checkpoint.com/solutions?id=sk68701) and
see the 21400 Appliances Installing Telescoping Rails (Original) guide.
General Requirements for Racks
The 21000 Appliances are designed for a standard 19-inch (48.26 cm) rack (see specification EIA-310-D).
Use the telescoping rails with racks that have these specifications:
Minimum depth: 26 in (66 cm)
Maximum depth: 35 in (88.9 cm)
Front and rear rack doors must have equally distributed holes on at least 65% of the surface area to give
sufficient airflow. Make sure that the racks have sufficient clearance to service the Check Point appliances
that are mounted on telescoping rails.
Rack Side
Clearance Requirement
Front
36 in (91.44 cm) plus additional clearance, if needed, for the mechanical lift
used to move Check Point rails equipment.
Rear
16 in (40.64 cm) from the rear side of the rack or chassis, whichever is
closest to the rear. (Without back door cabinet)
22 in (55.88 cm) from the rear side of the rack or chassis, whichever is
closest to the rear. (With back door cabinet)
Sides
N/A (no accessible parts)
The telescoping rails can be used with racks that have round holes or square holes.

Rack Mounting with Telescoping Rails
21000 Appliances Getting Started Guide | 11
Note - You must use the screw plates to attach the rack rails to these types of racks:
Square holes
Round holes that are larger than the supplied large round-head screws
Appliance Physical Specifications
These are the physical specifications of the Check Point appliance models that can be mounted in the
telescoping rails.
Appliance
Width
Depth
Height
21700, 21600
and 21400
17.24 in (43.8 cm)
29.5 in (74.93 cm )
3.44 in (8.8 cm) (2U)
Telescoping Rails Hardware
Important - Two people are required to install the appliance in a rack in order to prevent any
possible damage.
Item
Hardware Description
Qty.
Use
1
Rack rail
2
Attaches to the front of the rack.
1a
Rack rail (rear)
2
Appliance rail
2
Attaches to the sides of the appliance.
2a
Appliance rail (rear)
3
Small flat-head screws
8
Attaches the appliance rails to the appliance.
4
Large flat-head screws
12
Attaches the rack rails and the ear brackets of the
appliance to the racks.
5a
Rear screw plates
(three holes)
2
Makes sure that the rail flange is securely attached to
the rack for these types of racks:
Square holes
Round holes that are larger than the supplied
large round-head screws
5b
Front screw plates
(six holes)
2

Rack Mounting with Telescoping Rails
21000 Appliances Getting Started Guide | 12
Rack Mounting Tools
Philips screwdriver. We recommend a screwdriver with a magnetic head to hold screws and retrieve
dropped screws.
Attaching the Appliance Rails
Disconnect the appliance rail and the rack rail and use four small screws to attach each appliance rail to the
sides of the appliance.
To attach the appliance rails:
1. On the appliance rail, push the front release clip and remove the appliance rail from the rack rail.
2. Set the appliance rail on the side of the appliance.
Make sure that the arrow-latch faces the front of the appliance.
3. Attach the appliance rails to the appliance with four small screws.
4. Do steps 1 - 3 again for the other side of the appliance.
Attaching the Rack Rails
Attach the rack rails and screw plate to the rack. Make sure that you have these pieces ready:
2 Rack rails
8 Large round-head screws
2 Front screw plates (6 holes)
2 Rear screw plates (3 holes)

Rack Mounting with Telescoping Rails
21000 Appliances Getting Started Guide | 13
Item
Description
1
Front screw plate (6 holes)
2
Front face of the rack post
3
Front flange
4
Large flat-head screws
To attach the rack rails to the rack:
1. Put the front flange of the rack rail on the front face of the rack post.
2. For square hole racks and round holes that are larger than the large round-head screws, place the
screw plate behind the rack post at the same location as the front flange.
Make sure that you align the bottom hole of the front screw plate with the bottom hold of the front flange
of the rack rail.
3. Use two screws to attach the front flange to the front screw plate.
Do not use a screw on the center hole of the front rail flange.
4. Do steps 1 - 3 again to attach the rear flange and rear screw plate to the rear of the rack.
5. Do steps 1 - 4 again for the other rack rail.
Note - For rack posts with threaded holes, do not use the screw plates. Screw the rail
flanges directly to the threaded rack posts.
Installing the Appliance
Install the appliance in the telescoping rails in the rack.
Important - A 2U appliance is heavy and two people are required to hold and install the
appliance in the rack to prevent personal injury and damage to the appliance.
You must disengage both the front and rear rail locks when installing the appliance.
We recommend that you secure the ear brackets of the appliance to the rack after you move the appliance
into the rack.
To install the appliance in the rack:
1. Set the appliance until the appliance rails are level with the rack rails.
2. Move the appliance into the rack until the telescoping rails click.

Rack Mounting with Telescoping Rails
21000 Appliances Getting Started Guide | 14
The telescoping rails are locked.
3. Push the front release clips and move the appliance into the rack.
To secure the appliance to the rack:
1. Use two screws to attach the right ear bracket to the front face of the rack.
2. Use one screw to attach lower part of the left ear bracket to the front face of the rack.
The LCD panel blocks the upper part of the left ear bracket.
Item
Description
1
Ear bracket
2
Screws that attach appliance to rack

Rack Mounting with Telescoping Rails
21000 Appliances Getting Started Guide | 15
Removing the Appliance
Unlock the telescoping rails to remove the appliance from the rack.
Important - A 2U appliance is heavy and two people are required to hold and remove the
appliance from the rack to prevent personal injury and damage to the appliance.
To remove the appliance from the rack:
1. Move the appliance away from the rack as far as possible.
2. Push the front release clips and move the appliance away from the rack rail.
3. Push the rear release clips and move the rack rails into the rack as far as possible.

21000 Appliances Getting Started Guide | 16
Chapter 3
21000 Appliances Hardware
In This Chapter
Front Panel Components 16
Rear Panel Components 22
Replacing and Upgrading Components 25
Front Panel Components
This section describes the features and components located on the appliance front panel.
Check Point 21700 and 21600 Front Panel
Item
Description
1
System LEDs (System power, system status, and hard disk activity).
2
LCD display screen.
3
Keypad for LCD screen.
4
2 Hard disk drives.
When monitoring the disks using the raid_diagnostic command, DiskID 0
is the top disk, and DiskID 1 is the bottom disk.
5
Hard disk power and activity LEDs.
6
Three slots for Ethernet interface line cards ("Line Cards" on page 21).
7
Reset button and ESD grounding plug.
8
Console port - for a serial connection to the appliance using a terminal emulation
program such as HyperTerminal or PuTTY.

21000 Appliances Hardware
21000 Appliances Getting Started Guide | 17
Item
Description
9
LOM (Lights Out Management) port for the optional LOM card.
10
Management port - for an Ethernet connection to a remote management
computer.
11
SYNC port - For synchronizing with cluster members or a high availability peer.
12
USB port.
Check Point 21700 and 21600 Front Panel LEDS
Item
Description
1
System Power.
OFF - System power off
ON (Green) - System power on
2
System Status.
Green –System OK
Orange –Alarm for voltage, temperature or fan.
3
Hard disk drive (HDD) Activity.
OFF - No HDD Activity
ON (Green) - HDD Activity
4
Hard disk drive (HDD) Activity.
OFF - No HDD Activity
ON (Amber) - HDD Activity
5
Hard disk drive (HDD) Power.
OFF –HDD Power off
ON (Green) –HDD Power on
6
ESD grounding plug
7
Reset - Does a hardware reset.

21000 Appliances Hardware
21000 Appliances Getting Started Guide | 18
Item
Description
8
Link
OFF - No Link
ON (Green) - Link
9
Activity
OFF - No Activity
Slow Blink (Amber) - Activity
Check Point 21400 Front Panel
Item
Description
1
System LEDs (System power, system status, and hard disk activity).
2
LCD display screen.
3
Keypad for LCD screen.
4
2 Hard disk drives.
When monitoring the disks using the raid_diagnostic command, DiskID 0
is the top disk, and DiskID 1 is the bottom disk.
5
Hard disk power and activity LEDs.
6
Three slots for Ethernet interface line cards ("Line Cards" on page 21).
7
Console port - for a serial connection to the appliance using a terminal emulation
program such as HyperTerminal.
8
LOM (Lights Out Management) port for the optional LOM card.
9
Management connection port - for an Ethernet connection to a remote
management computer.
10
USB ports.

21000 Appliances Hardware
21000 Appliances Getting Started Guide | 19
Check Point 21400 Front Panel LEDS
Item
Description
1
System Power.
OFF - System power off
ON (Green) - System power on
2
System Status.
Green –System OK
Orange –Alarm for voltage, temperature or fan.
3
Hard disk drive (HDD) Activity.
OFF - No HDD Activity
ON (Green) - HDD Activity
4
Hard disk drive (HDD) Activity.
OFF - No HDD Activity
ON (Amber) - HDD Activity
5
Hard disk drive (HDD) Power.
OFF –HDD Power off
ON (Green) –HDD Power on
6
Link
OFF - No Link
ON (Green) - Link
7
Activity
OFF - No Activity
Slow Blink (Amber) - Activity

21000 Appliances Hardware
21000 Appliances Getting Started Guide | 20
Managing 21000 Appliances Using the LCD Panel
The appliance has an LCD panel that you can use to do basic management operations. You can enable
DHCP. You can configure the management IP address, netmask, and default gateway of the appliance. You
can reboot the appliance.
Menu Options
Menu
Sub-menu
Purpose
Network
DHCP
Enable or disable IP address allocation using
DHCP
Set Internal IP
or
Set Mgmt IP
Set the management interface IP address
(cannot be edited when DHCP is enabled)
Set Netmask
Set the management interface network mask
(cannot be edited when DHCP is enabled)
Set Default GW
Set the management interface default gateway
(cannot be edited when DHCP is enabled)
System
Reboot
Reboot the appliance
LCD Panel Keys
To
Press
Enter the main menu
Enter
Navigate the menu
or
Select a menu option
Enter
Go back to previous
menu
ESC
When Entering an IP Address
To
Press
Move to the next digit
Enter
Move back to the
previous digit
ESC
Approve the change
Enter when the cursor is located on the last digit
Cancel the IP change
ESC when the cursor is located on the first digit
Change current digit
or