Checkpoint QUANTUM SPARK 1500 Mode d’emploi

Models: V-80, V-80W, V-81, V-81W, V-81WL, V-81WD, V-81R, V-81WLR, V-82, V-83 [Classification: Protected]

18 April2021

QUANTUM SPARK 1500,

1600 AND 1800

APPLIANCE SERIES

R80.20.25

Locally Managed

Administration Guide

Check Point Copyright Notice

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 2

Check Point Copyright Notice

under licensing restricting their use, copying, distribution, and decompilation. No part of this product or

related documentation may be reproduced in any form or by any means without prior written authorization

of Check Point. While every precaution has been taken in the preparation of this book, Check Point

assumes no responsibility for errors or omissions. This publication and features described herein are

subject to change without notice.

RESTRICTED RIGHTS LEGEND:

Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)

(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR

52.227-19.

TRADEMARKS:

Refer to the Copyright page for a list of our trademarks.

Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 3

Important Information

Latest Software

We recommend that you install the most recent software release to stay up-to-date with the

latest functional improvements, stability fixes, security enhancements and protection

against new and evolving attacks.

Certifications

For third party independent certification of Check Point products, see the Check Point

Certifications page.

Check Point R80.20.25

For more about this release, see the R80.20.25 home page.

Latest Version of this Document in English

Open the latest version of this document in a Web browser.

Download the latest version of this document in PDF format.

Feedback

Check Point is engaged in a continuous effort to improve its documentation.

Please help us by sending your comments.

Revision History

Date Description

18 April2021 Updated

"SNMP" on page277

05 April 2021 First release of this document

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 4

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series Overview

1500 Appliances

1600 and 1800 Appliances

Setting up the Quantum Spark Appliance

Connecting the Cables

First Time Deployment Options

Zero Touch Cloud Service

Deploying from a USB Drive or SD Card

Sample Configuration File

Preparing the Configuration Files

Deploying the Configuration File - Initial Configuration

Deploying the Configuration File - Existing Configuration

Viewing Configuration Logs

Troubleshooting Configuration Files

Configuration File Error

Suggested Workflow - Configuration File Error

Sample Configuration Log with Error

Using the set property Command

Configuration and Upgrade Scenarios

Configuring Cloud Services

Configuring a Guest Network

Configuring VPN

Configuring Remote Access VPN

Introduction

Prerequisites

Remote Access Configuration

L2TP VPN Client configuration

Configuring Site to Site VPN with a Preshared Secret

Introduction

Prerequisites

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 5

Configuration

Monitoring

Configuring Site to Site VPN with a Certificate

Introduction

Prerequisites

Configuration

Trust Procedures

Monitoring

Managing Clusters

Configuring a Cluster

Upgrading a Cluster

Configuring QoS

Enabling VoIP Traffic

Introduction

Configuration

Appliance Configuration

The Home Tab

Viewing System Information

Controlling and Monitoring Software Blades

Setting the Management Mode

Configuring Cloud Services

Managing Licenses

Viewing the Site Map

Notifications

Managing Active Devices

Viewing Monitoring Data

Network

Troubleshooting

Viewing Reports

Using System Tools

Managing the Device

Configuring Internet Connectivity

Configuring the Internet Connectivity

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 6

The 'Configuration' tab

Creating a New Bond (WAN)

The 'Connection Monitoring' tab

The 'Advanced' tab

Monitoring

Configuring Wireless Network

Configuring the Local Network

Reserved IP Address for Specific MAC

Switch

WAN as LAN

Monitor Mode

Physical Interfaces

Bridge

VLANs

Alias IP

VPN Tunnel (VTI)

Virtual Access Point (VAP)

BOND

Configuring a Hotspot

Configuring the Routing Table

Configuring MAC Filtering

Configuring the DNS Server

Configuring the Proxy Server

Backup, Restore, Upgrade, and Other System Operations

Using the Software Upgrade Wizard

Welcome

Upload Software

Upgrade Settings

Upgrading

Backing up the System

Configuring Local and Remote System Administrators

Configuring Administrator Access

102

Managing Device Details

104

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 7

Managing Date and Time

105

Configuring DDNS and Access Service

106

DDNS

106

Reach My Device

106

Remote Access to the WebUI

107

Remote Access to the CLI

107

Using System Tools

107

Managing Installed Certificates

108

Managing Internal Certificates

110

Configuring High Availability

112

Advanced Settings

117

Managing the Access Policy

150

Configuring the Firewall Access Policy and Blade

150

Firewall Policy

151

Application & URL Filtering

152

Updates

153

User Awareness

154

Tracking

155

More Information

155

Working with the Firewall Access Policy

156

Firewall Policy

156

Configuring Access Rules

159

Updatable Objects

161

Customizing Messages

161

Defining Firewall Servers

163

Defining NAT Control

166

Advanced - Creating and Editing NAT Rules

171

Working with User Awareness

174

Configuring the QoS Blade

177

Working with QoS Policy

179

SSL Inspection Policy

182

SSL Inspection

182

Deploying SSL Inspection

182

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 8

SSL Inspection Bypass Policy

183

HTTPS Categorization

184

SSL Inspection Exceptions

185

SSL Inspection Advanced

186

Managing Threat Prevention

187

Configuring Threat Prevention Blade Control

187

Configuring Threat Prevention Policy Exceptions

190

Threat Prevention Exceptions

190

Whitelists

190

Threat Prevention - Infinity SOC

191

Viewing Infected Devices

193

Viewing the IPS Protections List

196

Advanced Threat Prevention Engine Settings

197

IPS

197

Anti-Virus

197

Anti-Bot

199

Threat Emulation

200

User Messages

201

Configuring the Anti-Spam Blade Control

203

Configuring Anti-Spam Exceptions

205

Managing VPN

206

Configuring the Remote Access Blade

206

Configuring Remote Access Users

209

Remote Access - Connected Remote Users

214

Configuring Remote Access Authentication Servers

215

Configuring Advanced Remote Access Options

219

Office Mode

219

DNS Servers for Remote Access users

220

DNS Domain Name

221

SSL VPN bookmarks

221

Configuring the Site to Site VPN Blade

223

Configuring VPN Sites

224

Configuring Advanced Site to Site Community Settings

230

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 9

Viewing VPN Tunnels

231

Configuring Advanced Site to Site Settings

232

Configuring a Local Encryption Domain

232

Configuring the Appliance Interfaces

233

Tunnel Health Monitoring

234

Managing Trusted CAs

235

Managing Installed Certificates

237

Managing Internal Certificates

239

Managing Users and Objects

241

Working with User Awareness

241

Configuring Local Users and User Groups

244

Configuring Local and Remote System Administrators

246

Managing Authentication Servers

252

Managing Applications & URLs

256

Managing System Services

258

Managing Service Groups

261

Managing Network Objects

263

Managing Network Object Groups

266

Logs and Monitoring

267

Viewing Security Logs

267

Viewing System Logs

269

Configuring External Log Servers

270

External Check Point Log Server

270

External Syslog Server Configuration

271

Secured Syslog

272

Notifications

273

Managing Active Devices

273

Wireless Active Devices

273

Paired Mobile Devices

273

Viewing Infected Devices

273

Viewing VPN Tunnels

274

Viewing Active Connections

275

Access Points

276

Table of Contents

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 10

Viewing Monitoring Data

276

Viewing Reports

276

Using System Tools

276

SNMP

277

SNMP Traps Receivers

278

SNMP Traps

278

SNMPTraps for VPNTunnels

278

SNMP Traps for Hardware Sensors

278

Advanced Configuration

280

Upgrade Using a USB Drive

280

Upgrade Using an SD Card

281

Boot Loader

282

Upgrade Using Boot Loader

283

Restoring Factory Defaults

284

Autres manuels pour QUANTUM SPARK 1500

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Checkpoint Matériel réseau

Checkpoint

Checkpoint 21000 Appliances G-70 Manuel utilisateur

Checkpoint

Checkpoint 21000 Series Mode d’emploi

Checkpoint

Checkpoint 5000 Series Manuel utilisateur

Checkpoint

Checkpoint UTM-1 U-5 Manuel utilisateur

Checkpoint

Checkpoint IPS-1 Manuel utilisateur

Checkpoint

Checkpoint QUANTUM SMART-1 6000-L/6000-XL Manuel utilisateur

Checkpoint

Checkpoint TE250X Manuel utilisateur

Checkpoint

Checkpoint UTM-1 Edge W16 Manuel utilisateur

Checkpoint

Checkpoint VPN-1 Edge X Series Manuel utilisateur

Checkpoint

Checkpoint 6000 Series Manuel utilisateur

Checkpoint

Checkpoint QUANTUM MAESTRO Manuel utilisateur

Checkpoint

Checkpoint NGX R66 Manuel utilisateur

Checkpoint

Checkpoint 730 Manuel utilisateur

Checkpoint

Checkpoint QUANTUM SMART-1 Manuel utilisateur

Checkpoint

Checkpoint Smart-1 625 Mode d’emploi

Checkpoint

Checkpoint CPAC-Falcon-10G-B Mode d’emploi

Checkpoint

Checkpoint 6000 Series Manuel utilisateur

Checkpoint

Checkpoint 21000 Appliances G-70 Mode d’emploi

Checkpoint

Checkpoint TE2000XN Manuel utilisateur

Checkpoint

Checkpoint Smart-1 205 Manuel utilisateur

Checkpoint

Checkpoint QUANTUM FORCE 19000 Manuel utilisateur

Checkpoint

Checkpoint 16000 Manuel utilisateur

Checkpoint

Checkpoint Smart-1 225 Mode d’emploi

Checkpoint

Checkpoint 12000 Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur