Frequently Asked Questions


The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the concepts presented in this chapter and to assist you with real-life implementation of these concepts. To have your questions about this chapter answered by the author, browse to www.syngress.com/solutions and click on the Ask the Author form. You will also  gain access to thousands of  other  FAQs at ITFAQnet.com.

1.  

If I want to install FloodGate-1 or other add-ons to my firewall, in what order should I install the packages?

if installing from individual files, you should install the svn foundation first, then vpn-1/firewall-1 ng, and then floodgate-1 ng or any other check point ng products. the wrapper handles this by presenting you with options in the correct order and installing them according to check point s recommendations.

2.  

I installed NG AI Primary SmartCenter on a Nokia appliance, but I can t log in with the Check Point NG management clients . What am I doing wrong?

your smartconsole clients must be on the same build as your smartcenter server. verify that your ip address is listed in the gui-clients file and upgrade your gui clients to ng with application intelligence. if you have applied a hotfix, an updated version of the smartconsole clients may be required.

3.  

I just upgraded one of my 4.1 firewall modules to NG AI, and it s not able to fetch a policy. What can I do?

verify that you have changed the module s version to ng in its workstation object, and that you have initialized sic. you may have to push the policy the first time after an upgrade.

4.  

It doesn t seem like my Nokia is forwarding packets. How do I enable IP forwarding on a Nokia?

it should be enabled by default. if you believe that this may have been disabled, use the command ipsofwd on admin to enable ip forwarding in your nokia. for help with the ipsofwd command, type ipsofwd help to display the usage.

5.  

What are the most important elements of a high-performance SecurePlatform configuration?

of course, a fast cpu with ample cache (i.e. the intel xeon processor) is very important, but secureplatform can fully take advantage of multiple processors, so don t be afraid of installing two or more very fast processors. extra memory is required for handling large numbers of connections. most times, however, the limitation is the bus of the system. multiple, fast pci-x buses are the key to creating a very fast, high-throughput firewall. refer to check point s platform selection guide to view what different configurations of dell, hp, ibm, and sun systems running secureplatform yield with regards to throughput numbers. to get more out of your current solaris or linux installation, license and install the performance pack that will replace the stock kernel with a check point compiled (suntone-certified on the solaris platform) kernel yielding tremendous gains in performance as well.

Answers

1.  

If installing from individual files, you should install the SVN foundation first, then VPN-1/FireWall-1 NG, and then FloodGate-1 NG or any other Check Point NG products. The wrapper handles this by presenting you with options in the correct order and installing them according to Check Point s recommendations.

2.  

Your SmartConsole clients must be on the same build as your SmartCenter Server. Verify that your IP address is listed in the gui-clients file and upgrade your GUI clients to NG with Application Intelligence. If you have applied a hotfix , an updated version of the SmartConsole clients may be required.

3.  

Verify that you have changed the module s version to NG in its workstation object, and that you have initialized SIC. You may have to push the policy the first time after an upgrade.

4.  

It should be enabled by default. If you believe that this may have been disabled, use the command ipsofwd on admin to enable IP forwarding in your Nokia. For help with the ipsofwd command, type ipsofwd “help to display the usage.

5.  

Of course, a fast CPU with ample cache (i.e. the Intel Xeon processor) is very important, but SecurePlatform can fully take advantage of multiple processors, so don t be afraid of installing two or more very fast processors. Extra memory is required for handling large numbers of connections. Most times, however, the limitation is the bus of the system. Multiple, fast PCI-X buses are the key to creating a very fast, high-throughput firewall. Refer to Check Point s Platform Selection Guide to view what different configurations of Dell, HP, IBM, and Sun systems running SecurePlatform yield with regards to throughput numbers . To get more out of your current Solaris or Linux installation, license and install the Performance Pack that will replace the stock kernel with a Check Point compiled (SunTone-Certified on the Solaris platform) kernel yielding tremendous gains in performance as well.




Check Point NG[s]AI
Check Point NG[s]AI
ISBN: 735623015
EAN: N/A
Year: 2004
Pages: 149

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net