Check Point L-71 - Configuring a Configuration Script; Configuring a Provisioning Profile

SmartProvisioning
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 36
Configuring a Configuration Script
To configure a configuration script on a Provisioning Profile:
1.
Open the Security Gateway Profile window, and select the Configuration Script tab.
2.
Select Manage Configuration Script centrally from this application.
3.
Click Advanced.
The Profile Settings window opens.
4.
Select one of these override profile settings (on page 36):
• Allowed
• Denied
• Mandatory
5.
In Configuration Script, enter a script to run on the Small Office Appliance gateway.
6.
Click Apply.
Configuring a Provisioning Profile
For each set of configurations managed with a Provisioning Profile, you can decide which settings
have preference:
local (not provisioned) or central (from SmartProvisioning individual
management or from Provisioning Profile).
To configure the settings of a Provisioning Profile:
1.
In the Profiles List, right-click a profile and select Edit Provisioning Profile.
2.
In the Profile window, click any category tab (other than General).
3.
Select management settings for gateways that reference the profile:
• Manage settings locally on the device: Each gateway that references this profile has its
own settings, configured locally (not on SmartProvisioning). These settings cannot be
overwritten by changes to the Provisioning Profile or to the SmartProvisioning gateway
object. If you select this option, the Gateway window shows: settings are defined to be
managed locally on the device.
• Manage settings centrally from this application: Each gateway that references this profile
gets its configuration for this setting from the Provisioning Profile or from the
SmartProvisioning gateway object.
4.
If you selected to manage settings centrally, click Advanced.
The Profile Settings window opens.
5.
Select an option for Overriding profile settings on device level is:
• Allowed - You can override the profile settings with device-local settings, or with changes
to these settings in the SmartProvisioning device window. You can also leave the profile
settings as they are.
• Denied - Each gateway takes the settings from the profile, with no option to override the
profile settings.
• Mandatory - Each gateway is managed without a Provisioning Profile.
6.
Click OK.