All FireWall-1 administrators with Nokia firewalls need to know basic tasks such as installing and upgrading the Check Point FireWall-1 software packages. If you never upgraded your firewall, you could be at risk if there are known vulnerabilities in that release that have been resolved in newer patches. In this chapter we have provided the tools necessary to complete these tasks so that you can continue to secure your organization with Check Point FireWall-1 on Nokia.

Preparation is always key to a successful upgrade or install. With FireWall-1, you need to obtain licenses, configure a hosts entry, and possibly upgrade the IPSO image on your Nokia before you can begin with Check Point. It's also very important to read all release notes available before you install new software.

Once you have the software installed on IPSO, you then need to enable it. If you are running Check Point NG, you will first need to enable the SVN Foundation, Apply and Save your configuration, and then enable the VPN-1/FireWall-1 packages. When you enable packages through the Manage Installed Packages configuration screen, the file /var/etc/pm_profile is updated with appropriate environment variables. This means that you will need to log in again to the Nokia after the packages are enabled to receive the correct shell environment. The next step to configuring the firewall is to run cpconfig. The first run of this utility will prompt you for the type of install (standalone or distributed), licenses, administrators, management clients, ICA initialization,...