Check Point QUANTUM SPARK 1600

To Next Page

To Previous Page

Managing VPN

Quantum Spark 1500, 1600, and 1800 Appliances R81.10.X Locally Managed Administration Guide|216

Managing VPN

This section describes how to set up and manage Remote Access and Site to Site VPN.

Main Page

Table of Contents5
Overview of Quantum Spark 1500, 1600, and 1800 Appliance Series15
1500 Appliances15
1600 And 1800 Appliances15
Getting Started with 1500, 1600, and 1800 Appliance Series17
Setting up the Quantum Spark Appliance19
Using Default Wifi19
First Time Deployment Options21
Zero Touch Cloud Service22
Deploying from a USB Drive or SD Card23
Sample Configuration File23
Preparing the Configuration Files23
Deploying the Configuration File - Initial Configuration24
Deploying the Configuration File - Existing Configuration25
Viewing Configuration Logs25
Troubleshooting Configuration Files26
Configuration File Error26
Suggested Workflow - Configuration File Error26
Sample Configuration Log with Error27
Using the Set Property Command27
Configuration and Upgrade Scenarios28
Configuring Cloud Services28
Configuring a Guest Network29
Introduction to the Webui30
The Home Tab31
Viewing System Information31
Controlling and Monitoring Software Blades33
Setting the Management Mode35
Configuring Cloud Services37
Managing Licenses40
Viewing the Site Map42
Notifications42
Managing Active Devices44
Blocking a Device Temporarily44
Toobar Buttons44
Revoking the Hotspot Access45
Adding a New Network Object to Bypass SSL Inspection Based on the Host MAC Address45
Viewing Monitoring Data46
Network46
Troubleshooting47
Viewing Reports48
Using System Tools50
Managing the Device54
Configuring Internet Connectivity54
The Configuration Tab55
Prefix Delegation (Ipv6 Only)58
Neighbor Discover Protocol (ND Proxy) - Ipv6 Only59
DS-Lite (Dual Stack Lite, Ipoe)60
Ipip61
Creating a New Bond (WAN)63
Configuring a USB Cellular Connection64
Configuring a Cellular Internet Connection (Cellular Models Only)64
Linking the APN to a SIM Card Based on a Specific MMCNMC Number65
Switching the Active Image66
The Connection Monitoring Tab68
The Advanced Tab69
Monitoring71
Configuring the Wireless Network74
Dynamic Frequency Selection (DFS)75
Cloning a VAP76
Additional Configurations76
Wireless Scheduler79
Wi-Fi Quality Analyzer80
Configuring the Local Network82
Reserved IP Address for Specific MAC83
Switch83
WAN as LAN84
Monitor Mode85
Mirror Port87
Physical Interfaces87
Bridge89
Vlans91
Alias IP91
VPN Tunnel (VTI)92
Virtual Access Point (VAP)93
Gre94
Bond95
Configuring a Hotspot97
User Authentication99
Disabling the Hotspot99
Configuring MAC Filtering100
802.1X Authentication Protocol101
Configuring the DNS Server103
Configuring the Proxy Server104
Backup, Restore, Upgrade, and Other System Operations105
Using the Software Upgrade Wizard107
Welcome107
Upload Software108
Upgrade Settings108
Upgrading108
Backing up the System108
Configuring Local and Remote System Administrators110
Administrator Roles110
Local Administrators110
Remote Administrators112
Pairing a Mobile Device113
Configuring a RADIUS Server for Non-Local Quantum Spark Appliance Users113
Configuring Administrator Access117
Managing Device Details119
Managing Date and Time120
Configuring DDNS and Access Service121
Ddns121
Reach My Device121
Remote Access to the Webui122
Remote Access to the CLI122
Using System Tools123
Advanced Routing127
Bgp127
Ospf127
Inbound Route Filters127
Route Redistribution128
Routing Options128
Routing Monitor128
Configuring the Routing Table129
Background129
Routing Table Columns130
Limitations130
Adding a Specific Ipv4 Static Route131
Adding a Default Ipv4 Static Route133
Editing an Existing Static Route134
Deleting an Existing Static Route134
Enabling or Disabling an Existing Static Route135
Managing Installed Certificates135
Managing Internal Certificates137
Configuring High Availability138
Background138
Limitations139
Prerequisites139
Configuration Workflow140
Configuring a Primary Cluster Member141
Configuring a Secondary Cluster Member142
Viewing Cluster Interfaces143
Viewing the Cluster Status145
Failing over Manually145
Changing Network Configuration of Cluster Members146
Resetting Cluster Configuration146
Upgrading a Cluster Manually147
Cluster Managed by Quantum Spark Portal148
Advanced Settings149
Filtering the List of Attributes149
Configuring the Attribute Values149
Restoring Default Values149
Clarifications150
Changes between Versions150
Managing the Access Policy152
Configuring the Firewall Access Policy and Blade152
Firewall Policy153
Application & URL Filtering154
Updates155
User Awareness156
Tracking157
More Information157
Working with the Firewall Access Policy158
Firewall Policy158
Configuring Access Rules160
Updatable Objects162
Customizing Messages162
Defining Firewall Servers164
Defining NAT Control167
Advanced - Creating and Editing NAT Rules172
Inspecting Voip Traffic175
Introduction175
Configuration177
Smart Accel177
Configuring Smart Accel in R81.10.05 and Higher178
Smart Accel for Services178
Smart Accel for Assets178
Configuring Smart Accel in R81.10.00179
Working with User Awareness180
Workflow180
Identity Sources180
Enabling User Awareness181
Active Directory Queries181
Browser-Based Authentication182
Identity Collector183
Configuring Qos184
Introduction184
Prerequisites184
Configuration184
Configuring the Qos Blade185
Qos185
Qos Default Policy186
Configuring the Qos Policy187
SSL Inspection Policy190
SSL Inspection190
Deploying SSL Inspection190
SSL Inspection Bypass Policy191
HTTPS Categorization192
SSL Inspection Exceptions193
SSL Inspection Advanced194
Managing Threat Prevention195
Configuring Threat Prevention Blade Control195
Enabling and Disabling Threat Prevention195
Enabling Threat Emulation Policy for the FTP Protocol195
Configuring a Custom Policy for Threat Prevention196
Scheduling Threat Prevention Updates197
Configuring Threat Prevention Policy Exceptions198
Threat Prevention Exceptions198
Allowlists199
Threat Prevention - Horizon SOC199
Viewing Infected Devices201
Viewing the IPS Protections List204
Advanced Threat Prevention Engine Settings205
Ips205
Anti-Virus205
Anti-Bot207
Threat Emulation208
User Messages209
Configuring the Anti-Spam Blade Control211
Configuring Anti-Spam Exceptions213
SSH Authentication213
Managing VPN216
Configuring VPN217
Configuring Remote Access VPN217
Introduction217
Prerequisites217
Remote Access Configuration217
L2TP VPN Client Configuration218
Configuring Site to Site VPN with a Preshared Secret219
Introduction219
Prerequisites219
Configuration219
Monitoring219
Configuring Site to Site VPN with a Certificate219
Configuration220
Trust Procedures220
Monitoring VPN221
Configuring the Remote Access Blade222
Getting Started with VPN Remote Access223
Advanced Options231
Changing the Default Remote Access VPN Port231
Connections between Remote Access VPN Clients in the same Office Mode Pool232
Configuring Remote Access Users234
Remote Access - Connected Remote Users238
Configuring Remote Access Authentication Servers239
Configuring Advanced Remote Access Options242
Office Mode242
DNS Servers for Remote Access Users243
DNS Domain Name243
SSL VPN Bookmarks244
Configuring the Site to Site VPN Blade245
Harmony Connect247
Configuring VPN Sites248
Configuring Advanced Site to Site Community Settings254
Viewing VPN Tunnels255
Configuring Advanced Site to Site Settings256
Configuring a Local Encryption Domain256
Configuring the Appliance Interfaces257
Tunnel Health Monitoring258
Managing Trusted cas259
Managing Installed Certificates261
Managing Internal Certificates263
Managing Users and Objects265
Working with User Awareness265
Workflow265
Identity Sources265
Enabling User Awareness266
Active Directory Queries266
Browser-Based Authentication267
Identity Collector268
Configuring Local Users and User Groups269
Configuring Local and Remote System Administrators271
Administrator Roles271
Local Administrators271
Remote Administrators273
Pairing a Mobile Device274
Configuring a RADIUS Server for Non-Local Quantum Spark Appliance Users274
Managing Authentication Servers278
RADIUS Server279
TACACS+ Server281
Active Directory282
Managing Applications & Urls285
Managing System Services287
Managing Service Groups290
Managing Network Objects292
Managing Network Object Groups296
Logs and Monitoring298
Viewing Security Logs298
Viewing System Logs300
Configuring External Log Servers301
External Check Point Log Server301
Syslog Server Configuration302
Secured Syslog303
Notifications304
Managing Active Devices304
Blocking a Device Temporarily304
Toobar Buttons304
Revoking the Hotspot Access305
Adding a New Network Object to Bypass SSL Inspection Based on the Host MAC Address305
Wireless Active Devices306
Paired Mobile Devices306
Viewing Infected Devices306
Viewing VPN Tunnels307
Viewing Active Connections308
Access Points309
Viewing Monitoring Data309
Viewing Reports309
Dr. Spark309
Using System Tools312
Snmp316
SNMP Traps Receivers317
SNMP Traps317
SNMP Traps for VPN Tunnels317
SNMP Traps for Hardware Sensors317
Advanced Configuration319
Upgrade Using a USB Drive319
Upgrade Using an SD Card320
Boot Loader321
Upgrade Using Boot Loader322
Restoring Factory Defaults323
Custom Default Image325
Fonic Bypass325
Configuring Bypass Mode in the Webui326
Configuring Bypass Mode in Gaia Clish326
Restful API327
Enabling and Disabling the REST API327
Request Structure327
Response Structure328
Versioning328
REST API Commands329
Login329
Logout330
Generate-Report330
Run-Clish-Command331

Other manuals for Check Point QUANTUM SPARK 1600

Getting Started Guide53 pages

Related product manuals

Check Point QUANTUM SPARK 1530

46 pages

Check Point QUANTUM SPARK 1500

332 pages

Check Point QUANTUM SPARK 1570

311 pages

Check Point QUANTUM SMART-1

20 pages

Check Point QUANTUM MAESTRO

188 pages

Check Point QUANTUM FORCE 19000

62 pages

Quantum SMART-1 600-M

6 pages

QUANTUM SMART-1 6000-L/6000-XL

Check Point QUANTUM SPARK 1600 - Managing VPN

Table of Contents

Other manuals for Check Point QUANTUM SPARK 1600

Related product manuals