Check Point NG/AI: Next Generation with Application Intelligence Security Administration

Frequently Asked Questions

The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the concepts presented in this chapter and to assist you with real-life implementation of these concepts. To have your questions about this chapter answered by the author, browse to www.syngress.com/solutions and click on the Ask the Author form. You will also gain access to thousands of other FAQs at ITFAQnet.com.

1.

If I want to install FloodGate-1 or other add-ons to my firewall, in what order should I install the packages?

2.

I installed NG AI Primary SmartCenter on a Nokia appliance, but I can t log in with the Check Point NG management clients. What am I doing wrong?

3.

I just upgraded one of my 4.1 firewall modules to NG AI, and it s not able to fetch a policy. What can I do?

4.

It doesn t seem like my Nokia is forwarding packets. How do I enable IP forwarding on a Nokia?

5.

What are the most important elements of a high-performance SecurePlatform configuration?

Answers

1.

If installing from individual files, you should install the SVN foundation first, then VPN-1/FireWall-1 NG, and then FloodGate-1 NG or any other Check Point NG products. The wrapper handles this by presenting you with options in the correct order and installing them according to Check Point s recommendations.

2.

Your SmartConsole clients must be on the same build as your SmartCenter Server. Verify that your IP address is listed in the gui-clients...