Learning Check Point 1

[pmoorey]

Hi All,

I wish to learn more about Check Point firewalls, I'm considering purchasing a Nokia Firewall to use as part of my home setup and to experiment with. I currently have a 30 day trial of SecurePlatform R60 running on VMWare, however my version of SecureConsole doesn't support R60 so I can't configure it....

Please could you advise me as to how difficult it would be to implement a Nokia IP330 and configure it using SmartDashboard?

Thank you in advance!

Peter
CCNA, Cisco Qualified Specialist

 

[rn4it]

The install is pretty easy and configuring it using SmartDashboard is very easy. Examcram has a CCSA book which covers all this installation on a Nokia platform and creating Security and NAT rules. Otherwise both Nokia and Checkpoints website have downloads which will assist you.

You'll need to use Smartdashboard R60

good luck

 

[pmoorey]

Hi,

Thank you for your reply, I'm just trying to figure out the logistics... if I purchase I IP330 from Ebay what else is required in order to configure it using smartdashboard?

I don't want to be lumbered with a piece of kit I can't install new software on. The account I have with Check Point doesn't entitle me to download any software.

I will definitely buy an appropriate book, as with the Cisco devices it seems a mine field for someone starting from scratch.

Please could you clarify what I require in order to configure the IP330 with smartdash.

Many thanks.



Peter
CCNA, Cisco Qualified Specialist

 

[watchguardmonkey]

you will need a check point license, otherwise you will need to remove and re-install the eval copy every 30 days.

the nokia box is just a router if you don't have a valid CP license.

 

[pmoorey]

Hi,

Thanks for your reply. Please could you clarify how I would go about getting a license, and whether I require anything other than the IP330, can the smartdashboard be installed on the IP330, I heard that it's possible for the IP330 to perform management and firewall roles.

Thanks in advance.


Peter
CCNA, Cisco Qualified Specialist

 

[watchguardmonkey]

you would need to purchase a a valid license from check point. or you may find a cracked version on the net.

the license comes either as a central license or end node/standalone license.

think you need to read up a little on the deployment of CP. the IP330 can be manager and FW depends on the license you get, this scenario would be a standalone license.

if you are just getting a feel for CP and wish to have a home/lab setup, best just go the eval route and re-format every 30 days.

this means you can have a pc as the manager, just read the notes on the eval cd.

 

[FWHATER]

Not only Checkpoint, but Nokia as well regarding support. Unless the version of ipso sitting on the ip330 is fairly recent, a la ipso 3.8 or 3.9, you'll need to download it from Nokia's site. Then you'll need the wrapper for R60 and above to install on top of ipso.

Without either of those, your Nokia ip330 ain't happenin'. I suggest you get a p3 or p4 server with two nics, get the trial software of Checkpoint R60 or above and install it on SPLAT. It's cheaper and you'll get almost the same experience.