Check Point HARMONY R81 - Page 46

Connection Port to Services on an Endpoint Security Management Server
R81 Harmony Endpoint Server Administration Guide|46
Scenario 4 - Gaia Portal uses an external SSL certificate, Gaia Portal listens on TCP port 4434,
and Endpoint Security listens on TCP port 443
1. Import and install the certificates:
a. Obtain the CA certificate that generated the custom SSL certificate for the Gaia
Portal.
b. Import the applicable CA certificate on the Endpoint Security Management
Server.
Follow "Importing External PKI Certificates" on page30 .
c. Import the new Gaia Portal SSL certificate on the Endpoint Security
Management Server.
Follow "Importing External PKI Certificates" on page30 .
d. Install the new CA certificate on Endpoint Clients.
Follow "Installing CA Certificates on Clients" on page31 .
e. Install the new Gaia Portal SSL certificate on the Endpoint Security
Management Server.
Follow "Installing SSL Certificates on Servers" on page32 .
2. Connect to the command line on the Endpoint Security Management Server.
3. Log in to the Expert mode.
4. Modify the $UEPMDIR/apache/conf/ssl.conf file:
a. Back up the current file:
cp -v $UEPMDIR/apache/conf/ssl.conf{,_BKP}
b. Edit the current file:
vi $UEPMDIR/apache/conf/ssl.conf
c. Configure this value in the "Listen" directive:
Listen 0.0.0.0:4434
d. In the "SSL Virtual Host Context" section, configure this value in the
"VirtualHost" directive:
<VirtualHost _default_:4434>
e. Save the changes in the file and exit the editor.