Check Point R80.20 - Page 97

Hardware Security Module (HSM)
Next Generation Security Gateway Guide R80.20 | 97
SNMP OID
Returned strings
Explanation
HSM is
disabled for
HTTPS
inspection
One of these:
• Gemalto HSM Simplified Client
software packages are not
installed on Security Gateway.
• The
$FWDIR/conf/hsm_configura
tion.C file does not exist on
Security Gateway.
• HTTPS Inspection daemon wstlsd
was not able to read the value of
the :enabled() attribute in the
$FWDIR/conf/hsm_configura
tion.C file on Security Gateway.
• The :enabled() attribute is
corrupted in the
$FWDIR/conf/hsm_configura
tion.C file on Security Gateway.
Important - In such cases, outbound
HTTPS Inspection works without
Gemalto HSM Appliance Server, and
SSL keys are stored on Security
Gateway.
To get HSM partition access status, query this SNMP object:
SNMP OID
Returned strings
Explanation
hsmStatus.hsmPartitionAccess
.1.3.6.1.4.1.2620.1.54.3.3
N/A
Security Gateway could not check
access its partition on HSM Appliance
Server.
Most probably, because HSM
configuration is disabled on Security
Gateway.
Accessible
Security Gateway was able to access
its partition on HSM Appliance Server.
Not Accessible
Security Gateway was not able to
access its partition on HSM Appliance
Server due to an error.