Installation Guide
Page 2
... technical information about Check Point products, and for a list of the Rights in Technical Data and Computer Software clause at http://support.checkpoint.com/. All rights reserved. Check Point is subject to restrictions as set forth in any form or by sending your comments...3rd_party_copyright.html. TRADEMARKS: Please refer to : [email protected] 2 Check Point IP690 Security Platform Installation Guide Please help us by any means without notice. For third party notices, see the Check Point Support Center at DFARS 252.227-7013 and FAR 52.227-19. © 2003...
... technical information about Check Point products, and for a list of the Rights in Technical Data and Computer Software clause at http://support.checkpoint.com/. All rights reserved. Check Point is subject to restrictions as set forth in any form or by sending your comments...3rd_party_copyright.html. TRADEMARKS: Please refer to : [email protected] 2 Check Point IP690 Security Platform Installation Guide Please help us by any means without notice. For third party notices, see the Check Point Support Center at DFARS 252.227-7013 and FAR 52.227-19. © 2003...
Installation Guide
Page 11
...this Guide Uses In this Guide This manual provides information for the installation and use of the supported NICs. Chapter 6, "Installing, Using, and Replacing ADP Services Modules" describes how...to install or replace memory, hard-disk drives, the fan unit, power supplies, battery, compact flash memory card, PC card, and the Check Point encryption accelerator card. Chapter 8, ...problems you might encounter and proposes solutions to and use each of the Check Point IP690 security platforms. Installation and maintenance should be performed by experienced technicians or Check Point...
...this Guide Uses In this Guide This manual provides information for the installation and use of the supported NICs. Chapter 6, "Installing, Using, and Replacing ADP Services Modules" describes how...to install or replace memory, hard-disk drives, the fan unit, power supplies, battery, compact flash memory card, PC card, and the Check Point encryption accelerator card. Chapter 8, ...problems you might encounter and proposes solutions to and use each of the Check Point IP690 security platforms. Installation and maintenance should be performed by experienced technicians or Check Point...
Installation Guide
Page 16
...platforms from any authorized location within the network by using . Check Point Horizon Manager for IP appliances-a secure GUI-based software image management application. You can accept a Check Point-approved NIC. The integrated router functionality eliminates the need for the version... line. Use one of the four Ethernet ports to obtain Horizon Manager, contact the Check Point Support Center at http://support.checkpoint.com/. 16 Check Point IP690 Security Platform Installation Guide For information about how to access the Network Voyager interface. The PCMCIA PC...
...platforms from any authorized location within the network by using . Check Point Horizon Manager for IP appliances-a secure GUI-based software image management application. You can accept a Check Point-approved NIC. The integrated router functionality eliminates the need for the version... line. Use one of the four Ethernet ports to obtain Horizon Manager, contact the Check Point Support Center at http://support.checkpoint.com/. 16 Check Point IP690 Security Platform Installation Guide For information about how to access the Network Voyager interface. The PCMCIA PC...
Installation Guide
Page 18
...assignment information for Check Point products that use the console port. The Check Point support services group can only provide support for console connections. 1 Overview PMC Expansion Slots The IP690 security platform provides two additional PMC expansion slots for Console Connector and Console Cable ...parts: A 6' rollover cable with the IP690 is comprised of the serial ports are: 9600 baud, 8 bits, no parity, and 1 stop. For sales or reseller information, contact the Check Point Support Center at http:// support.checkpoint.com/.. Table 3 Pin Assignments for network ...
...assignment information for Check Point products that use the console port. The Check Point support services group can only provide support for console connections. 1 Overview PMC Expansion Slots The IP690 security platform provides two additional PMC expansion slots for Console Connector and Console Cable ...parts: A 6' rollover cable with the IP690 is comprised of the serial ports are: 9600 baud, 8 bits, no parity, and 1 stop. For sales or reseller information, contact the Check Point Support Center at http:// support.checkpoint.com/.. Table 3 Pin Assignments for network ...
Installation Guide
Page 21
... for Logging The IP690 security platform is either a flash-based or disk-based appliance, and the appliance also supports one PC card at any one or two hard-disk drives for factory installation or order them later and install them yourself, as Figure 4 shows. The IP690 supports using only one or...storing log files. You can use the PC card flash memory to store local system logs. Using PC Card for Logging The IP690 slot 3 populated with an optional PCMCIA card carrier can support an optional PC card with a standard flash-based IP690, nor is located on the front panel of the...
... for Logging The IP690 security platform is either a flash-based or disk-based appliance, and the appliance also supports one PC card at any one or two hard-disk drives for factory installation or order them later and install them yourself, as Figure 4 shows. The IP690 supports using only one or...storing log files. You can use the PC card flash memory to store local system logs. Using PC Card for Logging The IP690 slot 3 populated with an optional PCMCIA card carrier can support an optional PC card with a standard flash-based IP690, nor is located on the front panel of the...
Installation Guide
Page 22
... Fan Unit Locations Fan unit FAULT OVER TEMP OVER PWER OK FAULT OVER TEMP OVER PWER OK Power supplies 00580 Power Supplies The IP690 supports two redundant power supplies. Power Supplies and Fan Unit The redundant power supplies and fan unit are located at http...://support.checkpoint.com/." Note The slot that the PCMCIA card carrier uses also supports other PMC cards approved by Check Point. 1 Overview this document, see "Replacing a Power Supply" on page 2. Figure 6...
... Fan Unit Locations Fan unit FAULT OVER TEMP OVER PWER OK FAULT OVER TEMP OVER PWER OK Power supplies 00580 Power Supplies The IP690 supports two redundant power supplies. Power Supplies and Fan Unit The redundant power supplies and fan unit are located at http...://support.checkpoint.com/." Note The slot that the PCMCIA card carrier uses also supports other PMC cards approved by Check Point. 1 Overview this document, see "Replacing a Power Supply" on page 2. Figure 6...
Installation Guide
Page 24
... water. Caution Risk of explosion if battery is not provided, use a power cord rated at http:// support.checkpoint.com/. 24 Check Point IP690 Security Platform Installation Guide Dispose of used batteries according to the software requirements or additional applications that your computer... can occur if you use controls, make performance adjustments, or follow basic safety precautions. Software Requirements The Check Point IP690 security platform supports the following operating system and applications as of the publication date for shipment outside of the United States, the cord set...
... water. Caution Risk of explosion if battery is not provided, use a power cord rated at http:// support.checkpoint.com/. 24 Check Point IP690 Security Platform Installation Guide Dispose of used batteries according to the software requirements or additional applications that your computer... can occur if you use controls, make performance adjustments, or follow basic safety precautions. Software Requirements The Check Point IP690 security platform supports the following operating system and applications as of the publication date for shipment outside of the United States, the cord set...
Installation Guide
Page 31
...screws. After you rack-mount the appliance, you can use the rear brackets for additional chassis support. 7. Adjust the mounting brackets on the mounting brackets. Check Point IP690 Security Platform Installation Guide 31 Reinstall the power supplies. SLOT 1 SLOT 2 CONSOLE RESET AUX... SLOT 3 1 2 3 4 SLOT 4 IP690 00583 8. Rack-Mounting the Appliance 5. Mount the appliance into ...
...screws. After you rack-mount the appliance, you can use the rear brackets for additional chassis support. 7. Adjust the mounting brackets on the mounting brackets. Check Point IP690 Security Platform Installation Guide 31 Reinstall the power supplies. SLOT 1 SLOT 2 CONSOLE RESET AUX... SLOT 3 1 2 3 4 SLOT 4 IP690 00583 8. Rack-Mounting the Appliance 5. Mount the appliance into ...
Installation Guide
Page 35
...power interruptions and potential power spikes that might damage your IP690. If the fans are on to the IP690. To connect the power supplies 1. For more information about the system status LEDs, see the Check Point Support Center at http://support.checkpoint.com/. Plug the other end of the power ... 00580 Caution To avoid potential service interruptions from the front of the appliance. That power is operating correctly. Check Point IP690 Security Platform Installation Guide 35 Connect the power cord securely into a three wire grounded power strip or wall outlet. 3.
...power interruptions and potential power spikes that might damage your IP690. If the fans are on to the IP690. To connect the power supplies 1. For more information about the system status LEDs, see the Check Point Support Center at http://support.checkpoint.com/. Plug the other end of the power ... 00580 Caution To avoid potential service interruptions from the front of the appliance. That power is operating correctly. Check Point IP690 Security Platform Installation Guide 35 Connect the power cord securely into a three wire grounded power strip or wall outlet. 3.
Installation Guide
Page 36
... at http://support.checkpoint.com/. 2. Press the power switch to the "on" position to turn on power to perform the initial configuration of the appliance turn on when you press the power switch. The fan son the back of your Check Point IP690 security platform, you must use DHCP... to the appliance. Verify that the terminal or terminal emulator program settings are still not running, or if the power LED does not illuminate, see the Check Point Support Center at http:// support.checkpoint.com/. 3. At the console...
... at http://support.checkpoint.com/. 2. Press the power switch to the "on" position to turn on power to perform the initial configuration of the appliance turn on when you press the power switch. The fan son the back of your Check Point IP690 security platform, you must use DHCP... to the appliance. Verify that the terminal or terminal emulator program settings are still not running, or if the power LED does not illuminate, see the Check Point Support Center at http:// support.checkpoint.com/. 3. At the console...
Installation Guide
Page 38
...to use Check Point Network Voyager. A Close button is the context-sensitive information source for Check Point Network Voyager. Online help is available at http:// support.checkpoint.com/. Network Voyager online help-You can access online help window you use to configure or monitor your appliance. 3 Performing the Initial Configuration... connection between the host and your appliance. Open a Web browser on the left side of each online help when you view. 38 Check Point IP690 Security Platform Installation Guide To open , you might have a network routing problem.
...to use Check Point Network Voyager. A Close button is the context-sensitive information source for Check Point Network Voyager. Online help is available at http:// support.checkpoint.com/. Network Voyager online help-You can access online help window you use to configure or monitor your appliance. 3 Performing the Initial Configuration... connection between the host and your appliance. Open a Web browser on the left side of each online help when you view. 38 Check Point IP690 Security Platform Installation Guide To open , you might have a network routing problem.
Installation Guide
Page 47
... replace NICs, see Chapter 4, "Installing and Replacing Network Interface Cards." The following NICs are properly grounded before you touch these components. The NICs supported in the Check Point IP690 security platform operate at the peripheral component interconnect (PCI) frequency listed in Table 6. Use a grounding wrist strap and follow the instructions provided with...
... replace NICs, see Chapter 4, "Installing and Replacing Network Interface Cards." The following NICs are properly grounded before you touch these components. The NICs supported in the Check Point IP690 security platform operate at the peripheral component interconnect (PCI) frequency listed in Table 6. Use a grounding wrist strap and follow the instructions provided with...
Installation Guide
Page 48
... is turned on and the cables are connected, the Ethernet link LEDs on both the IP690 and on the remote equipment illuminate to indicate the connection. In the IP690, the four-port Ethernet NIC supports the following features: Tracing through tcpdump High bandwidth Full...configure and monitor Ethernet NIC interfaces by using Check Point Network Voyager. Note The IP690 appliance requires IPSO 4.2 or later. 5 Connecting PMC Network Interface Cards Four-Port 10/100 Ethernet NIC The IP690 supports Check Point-approved, four-port UTP5 dual-mode (10-Mbps and 100Mbps) ...
... is turned on and the cables are connected, the Ethernet link LEDs on both the IP690 and on the remote equipment illuminate to indicate the connection. In the IP690, the four-port Ethernet NIC supports the following features: Tracing through tcpdump High bandwidth Full...configure and monitor Ethernet NIC interfaces by using Check Point Network Voyager. Note The IP690 appliance requires IPSO 4.2 or later. 5 Connecting PMC Network Interface Cards Four-Port 10/100 Ethernet NIC The IP690 supports Check Point-approved, four-port UTP5 dual-mode (10-Mbps and 100Mbps) ...
Installation Guide
Page 50
... Four-Port Copper Gigabit Ethernet NIC The Check Point IP690 security platform supports Check Point-approved, four-port and two-port copper Gigabit Ethernet NICs installed on page 38. 50 Check Point IP690 Security Platform Installation Guide The IP690 can accommodate up to 1 Gbps Link...Check Point Network Voyager. For information about how to four Gigabit Ethernet NICs. Copper Gigabit Ethernet NIC Features in the IP690 The copper Gigabit Ethernet NIC supports: Tracing through tcpdump High bandwidth Full-duplex mode operation up to access Network Voyager ...
... Four-Port Copper Gigabit Ethernet NIC The Check Point IP690 security platform supports Check Point-approved, four-port and two-port copper Gigabit Ethernet NICs installed on page 38. 50 Check Point IP690 Security Platform Installation Guide The IP690 can accommodate up to 1 Gbps Link...Check Point Network Voyager. For information about how to four Gigabit Ethernet NICs. Copper Gigabit Ethernet NIC Features in the IP690 The copper Gigabit Ethernet NIC supports: Tracing through tcpdump High bandwidth Full-duplex mode operation up to access Network Voyager ...
Installation Guide
Page 53
... or received, the activity LEDs on a PMC expansion slot. Two-Port Fiber-Optic Gigabit Ethernet NICs The IP690 supports Check Point-approved, two-port, fiber-optic Gigabit Ethernet NICs installed on the appliance illuminate. The IP690 can configure and monitor Gigabit Ethernet NIC interfaces with Check Point Network Voyager. As data is delivered...
... or received, the activity LEDs on a PMC expansion slot. Two-Port Fiber-Optic Gigabit Ethernet NICs The IP690 supports Check Point-approved, two-port, fiber-optic Gigabit Ethernet NICs installed on the appliance illuminate. The IP690 can configure and monitor Gigabit Ethernet NIC interfaces with Check Point Network Voyager. As data is delivered...
Installation Guide
Page 57
... Configuration Example with VRRP Note In this technology by offloading processing from the CPU to network processors. ADP is supported only for the IP690 running IPSO 6.0 or later. Check Point ADP module transceivers are hot swappable. It includes the following sections: ...ports, the modules use swappable small form-factor pluggable (SFP) transceivers to forward packets at the highest possible rate. Check Point IP690 Security Platform Installation Guide 57 Check Point ADP modules provide this chapter, network interface cards (NICs) refer to accelerate firewall and VPN...
... Configuration Example with VRRP Note In this technology by offloading processing from the CPU to network processors. ADP is supported only for the IP690 running IPSO 6.0 or later. Check Point ADP module transceivers are hot swappable. It includes the following sections: ...ports, the modules use swappable small form-factor pluggable (SFP) transceivers to forward packets at the highest possible rate. Check Point IP690 Security Platform Installation Guide 57 Check Point ADP modules provide this chapter, network interface cards (NICs) refer to accelerate firewall and VPN...
Installation Guide
Page 58
... and Replacing ADP Modules Note Before you should be completed with 58 Check Point IP690 Security Platform Installation Guide 6 Installing, Using, and Replacing ADP Services Modules Note Check Point supports only ADP modules and transceivers sold by using and refer to install an ADP ...module in IP690 appliances 1. To install an ADP module in your Check Point representative. You cannot...
... and Replacing ADP Modules Note Before you should be completed with 58 Check Point IP690 Security Platform Installation Guide 6 Installing, Using, and Replacing ADP Services Modules Note Check Point supports only ADP modules and transceivers sold by using and refer to install an ADP ...module in IP690 appliances 1. To install an ADP module in your Check Point representative. You cannot...
Installation Guide
Page 66
...interface cable into an available port in the ADP module. Rotate the transceiver latch lever down to indicate Activity. 66 Check Point IP690 Security Platform Installation Guide 6 Installing, Using, and Replacing ADP Services Modules Push the transceiver into the transceiver. To remove... Remove the cable. Release the transceiver by rotating the latch lever. Pull out the transceiver. Note The Non-Supported SFP Components table appears only if you install any ADP transceivers that are not recognized by Check Point. Check Point ADP Module LED Reference...
...interface cable into an available port in the ADP module. Rotate the transceiver latch lever down to indicate Activity. 66 Check Point IP690 Security Platform Installation Guide 6 Installing, Using, and Replacing ADP Services Modules Push the transceiver into the transceiver. To remove... Remove the cable. Release the transceiver by rotating the latch lever. Pull out the transceiver. Note The Non-Supported SFP Components table appears only if you install any ADP transceivers that are not recognized by Check Point. Check Point ADP Module LED Reference...
Installation Guide
Page 68
Using a configuration of the appliance. IP690 appliances support one ADP module which occupies both slots 1 and 2. The eight ports on your network topology after you install an ADP module in an IP690 appliance, the network processor in the module performs all VPN encryption and decryption, ...or egresses through PMC NIC interfaces. 6 Installing, Using, and Replacing ADP Services Modules Check Point ADP Module Interface Names for IP690 Appliances ADP module interface naming conventions differ from those for VPN packets that are sent through a NIC interface, throughput is negatively ...
Using a configuration of the appliance. IP690 appliances support one ADP module which occupies both slots 1 and 2. The eight ports on your network topology after you install an ADP module in an IP690 appliance, the network processor in the module performs all VPN encryption and decryption, ...or egresses through PMC NIC interfaces. 6 Installing, Using, and Replacing ADP Services Modules Check Point ADP Module Interface Names for IP690 Appliances ADP module interface naming conventions differ from those for VPN packets that are sent through a NIC interface, throughput is negatively ...
Installation Guide
Page 82
...1 or 2 indicates the PC-card slot. 2. A single optional hard-disk drive can order one or two hard-disk drive(s) for the flash-based IP690. This section describes how to remove the PC card. The hard-disk drives are susceptible to damage from ejecting too quickly, hold the PC ... plug into connectors on the motherboard. Perform a system shutdown by used for disk mirroring, is a flash-based appliance that also supports one of storage space. Installing a Hard-Disk Drive The IP690 is an option only for logging in the standard package for factory installation or order them later and ...
...1 or 2 indicates the PC-card slot. 2. A single optional hard-disk drive can order one or two hard-disk drive(s) for the flash-based IP690. This section describes how to remove the PC card. The hard-disk drives are susceptible to damage from ejecting too quickly, hold the PC ... plug into connectors on the motherboard. Perform a system shutdown by used for disk mirroring, is a flash-based appliance that also supports one of storage space. Installing a Hard-Disk Drive The IP690 is an option only for logging in the standard package for factory installation or order them later and ...