![Page 1: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/1.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 0
[Internal Use] for Check Point employees
Endpoint Management Deployment
Management R773003
Jumbo Hotfix 292
Endpoint E8081
V15
copy2018 Check Point Software Technologies Ltd All rights reserved | P 1
[Internal Use] for Check Point employees
Content
Endpoint Management Deployment 0
1 Needed files 2
2 Deployment of GAIA OS 3
3 First Time Configuration Wizard 6
4 Copy files to the Management 9
5 Update the CPUSE agent 10
51 Online update 10
52 Offline update 11
6 SmartConsole R773003 E8081 Installation 12
7 Licenses creation (just needed during a POC) 13
8 Licenses installation 15
9 Contracts installation 16
10 Activacioacuten de Endpoint Policy Management 17
11 Enable SmartLog 18
12 Jumbo Hotfix Installation for Endpoint Server 19
13 Jumbo Hotfix R773003 Installation for GAIA 19
14 Update to the latest JumboHotfix 20
15 Import the Endpoint packages 21
16 Endpoint client deployment 22
Appendix I Help Resources 24
Appendix II ESXESXi doesnrsquot detect the hard drive (sk7440) 25
Appendix III SmartEndpoint console crashes when uploading Endpoint packages (sk121722) 26
copy2018 Check Point Software Technologies Ltd All rights reserved | P 2
[Internal Use] for Check Point employees
1 NEEDED FILES
Here you are the needed files to download
A
1 R7730 ISO for Open Server gt Download
2 E8081 Endpoint Security Clients for Windows OS gt Download
3 SmartConsole for Endpoint Security Server R773003 E8081 gt Download
B
4 R7730 Jumbo Hotfix for Endpoint Security Server gt Download
5 R773003 Endpoint Security Server Package for Gaia OS gt Download
6 CPUSE Agent latest version (Optional) gt Download
copy2018 Check Point Software Technologies Ltd All rights reserved | P 3
[Internal Use] for Check Point employees
2 DEPLOYMENT OF GAIA OS
o Requirements to create the Virtual Machine
- Cores 4
- RAM 8GB
- Disco 500GB
o Mount the ISO file (File 1 from list A from the needed files) on the VM and boot the VM from the ISO
o Select ldquoInstall Gaia on this systemrdquo at the boot menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 4
[Internal Use] for Check Point employees
o Select ldquoOKrdquo
o Select ldquoSpanishrdquo (or your keyboard language layout)
o Configure the different partitions and select ldquoOKrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 5
[Internal Use] for Check Point employees
o Choose a password for the admin user and select ldquoOKrdquo
o Configure the network details they will depend on your own environment you donrsquot need to configure exactly the same IP range
o End the process and wait until VM finish rebooting
copy2018 Check Point Software Technologies Ltd All rights reserved | P 6
[Internal Use] for Check Point employees
3 FIRST TIME CONFIGURATION WIZARD
o Go to your management IP address configured in the previous step You should go through a web browser and use the HTTPS protocol
o Log in with the admin user and the password chosen in the step 2
o Select ldquoNextrdquo in the first menu
o Select ldquoNextrdquo in the second menu
o Select ldquoNextrdquo in the third menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 2: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/2.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 1
[Internal Use] for Check Point employees
Content
Endpoint Management Deployment 0
1 Needed files 2
2 Deployment of GAIA OS 3
3 First Time Configuration Wizard 6
4 Copy files to the Management 9
5 Update the CPUSE agent 10
51 Online update 10
52 Offline update 11
6 SmartConsole R773003 E8081 Installation 12
7 Licenses creation (just needed during a POC) 13
8 Licenses installation 15
9 Contracts installation 16
10 Activacioacuten de Endpoint Policy Management 17
11 Enable SmartLog 18
12 Jumbo Hotfix Installation for Endpoint Server 19
13 Jumbo Hotfix R773003 Installation for GAIA 19
14 Update to the latest JumboHotfix 20
15 Import the Endpoint packages 21
16 Endpoint client deployment 22
Appendix I Help Resources 24
Appendix II ESXESXi doesnrsquot detect the hard drive (sk7440) 25
Appendix III SmartEndpoint console crashes when uploading Endpoint packages (sk121722) 26
copy2018 Check Point Software Technologies Ltd All rights reserved | P 2
[Internal Use] for Check Point employees
1 NEEDED FILES
Here you are the needed files to download
A
1 R7730 ISO for Open Server gt Download
2 E8081 Endpoint Security Clients for Windows OS gt Download
3 SmartConsole for Endpoint Security Server R773003 E8081 gt Download
B
4 R7730 Jumbo Hotfix for Endpoint Security Server gt Download
5 R773003 Endpoint Security Server Package for Gaia OS gt Download
6 CPUSE Agent latest version (Optional) gt Download
copy2018 Check Point Software Technologies Ltd All rights reserved | P 3
[Internal Use] for Check Point employees
2 DEPLOYMENT OF GAIA OS
o Requirements to create the Virtual Machine
- Cores 4
- RAM 8GB
- Disco 500GB
o Mount the ISO file (File 1 from list A from the needed files) on the VM and boot the VM from the ISO
o Select ldquoInstall Gaia on this systemrdquo at the boot menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 4
[Internal Use] for Check Point employees
o Select ldquoOKrdquo
o Select ldquoSpanishrdquo (or your keyboard language layout)
o Configure the different partitions and select ldquoOKrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 5
[Internal Use] for Check Point employees
o Choose a password for the admin user and select ldquoOKrdquo
o Configure the network details they will depend on your own environment you donrsquot need to configure exactly the same IP range
o End the process and wait until VM finish rebooting
copy2018 Check Point Software Technologies Ltd All rights reserved | P 6
[Internal Use] for Check Point employees
3 FIRST TIME CONFIGURATION WIZARD
o Go to your management IP address configured in the previous step You should go through a web browser and use the HTTPS protocol
o Log in with the admin user and the password chosen in the step 2
o Select ldquoNextrdquo in the first menu
o Select ldquoNextrdquo in the second menu
o Select ldquoNextrdquo in the third menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 3: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/3.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 2
[Internal Use] for Check Point employees
1 NEEDED FILES
Here you are the needed files to download
A
1 R7730 ISO for Open Server gt Download
2 E8081 Endpoint Security Clients for Windows OS gt Download
3 SmartConsole for Endpoint Security Server R773003 E8081 gt Download
B
4 R7730 Jumbo Hotfix for Endpoint Security Server gt Download
5 R773003 Endpoint Security Server Package for Gaia OS gt Download
6 CPUSE Agent latest version (Optional) gt Download
copy2018 Check Point Software Technologies Ltd All rights reserved | P 3
[Internal Use] for Check Point employees
2 DEPLOYMENT OF GAIA OS
o Requirements to create the Virtual Machine
- Cores 4
- RAM 8GB
- Disco 500GB
o Mount the ISO file (File 1 from list A from the needed files) on the VM and boot the VM from the ISO
o Select ldquoInstall Gaia on this systemrdquo at the boot menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 4
[Internal Use] for Check Point employees
o Select ldquoOKrdquo
o Select ldquoSpanishrdquo (or your keyboard language layout)
o Configure the different partitions and select ldquoOKrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 5
[Internal Use] for Check Point employees
o Choose a password for the admin user and select ldquoOKrdquo
o Configure the network details they will depend on your own environment you donrsquot need to configure exactly the same IP range
o End the process and wait until VM finish rebooting
copy2018 Check Point Software Technologies Ltd All rights reserved | P 6
[Internal Use] for Check Point employees
3 FIRST TIME CONFIGURATION WIZARD
o Go to your management IP address configured in the previous step You should go through a web browser and use the HTTPS protocol
o Log in with the admin user and the password chosen in the step 2
o Select ldquoNextrdquo in the first menu
o Select ldquoNextrdquo in the second menu
o Select ldquoNextrdquo in the third menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 4: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/4.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 3
[Internal Use] for Check Point employees
2 DEPLOYMENT OF GAIA OS
o Requirements to create the Virtual Machine
- Cores 4
- RAM 8GB
- Disco 500GB
o Mount the ISO file (File 1 from list A from the needed files) on the VM and boot the VM from the ISO
o Select ldquoInstall Gaia on this systemrdquo at the boot menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 4
[Internal Use] for Check Point employees
o Select ldquoOKrdquo
o Select ldquoSpanishrdquo (or your keyboard language layout)
o Configure the different partitions and select ldquoOKrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 5
[Internal Use] for Check Point employees
o Choose a password for the admin user and select ldquoOKrdquo
o Configure the network details they will depend on your own environment you donrsquot need to configure exactly the same IP range
o End the process and wait until VM finish rebooting
copy2018 Check Point Software Technologies Ltd All rights reserved | P 6
[Internal Use] for Check Point employees
3 FIRST TIME CONFIGURATION WIZARD
o Go to your management IP address configured in the previous step You should go through a web browser and use the HTTPS protocol
o Log in with the admin user and the password chosen in the step 2
o Select ldquoNextrdquo in the first menu
o Select ldquoNextrdquo in the second menu
o Select ldquoNextrdquo in the third menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 5: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/5.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 4
[Internal Use] for Check Point employees
o Select ldquoOKrdquo
o Select ldquoSpanishrdquo (or your keyboard language layout)
o Configure the different partitions and select ldquoOKrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 5
[Internal Use] for Check Point employees
o Choose a password for the admin user and select ldquoOKrdquo
o Configure the network details they will depend on your own environment you donrsquot need to configure exactly the same IP range
o End the process and wait until VM finish rebooting
copy2018 Check Point Software Technologies Ltd All rights reserved | P 6
[Internal Use] for Check Point employees
3 FIRST TIME CONFIGURATION WIZARD
o Go to your management IP address configured in the previous step You should go through a web browser and use the HTTPS protocol
o Log in with the admin user and the password chosen in the step 2
o Select ldquoNextrdquo in the first menu
o Select ldquoNextrdquo in the second menu
o Select ldquoNextrdquo in the third menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 6: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/6.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 5
[Internal Use] for Check Point employees
o Choose a password for the admin user and select ldquoOKrdquo
o Configure the network details they will depend on your own environment you donrsquot need to configure exactly the same IP range
o End the process and wait until VM finish rebooting
copy2018 Check Point Software Technologies Ltd All rights reserved | P 6
[Internal Use] for Check Point employees
3 FIRST TIME CONFIGURATION WIZARD
o Go to your management IP address configured in the previous step You should go through a web browser and use the HTTPS protocol
o Log in with the admin user and the password chosen in the step 2
o Select ldquoNextrdquo in the first menu
o Select ldquoNextrdquo in the second menu
o Select ldquoNextrdquo in the third menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 7: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/7.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 6
[Internal Use] for Check Point employees
3 FIRST TIME CONFIGURATION WIZARD
o Go to your management IP address configured in the previous step You should go through a web browser and use the HTTPS protocol
o Log in with the admin user and the password chosen in the step 2
o Select ldquoNextrdquo in the first menu
o Select ldquoNextrdquo in the second menu
o Select ldquoNextrdquo in the third menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 8: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/8.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 7
[Internal Use] for Check Point employees
o Configure your device details and select ldquoNextrdquo
o Configure your right Time Zone and your NTP server in case yoursquore using one
o Select ldquoNextrdquo in the next menu
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 9: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/9.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 8
[Internal Use] for Check Point employees
o Check only ldquoSecurity Managementrdquo and select ldquoNextrdquo
o Configure your first admin user and select ldquoNextrdquo
o Select ldquoNextrdquo in the next menu
o Select ldquoFinishrdquo and ldquoYesrdquo in the last menu
o Wait until the initial First Time Configuration Wizard finishes and the VM reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 10: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/10.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 9
[Internal Use] for Check Point employees
4 COPY FILES TO THE MANAGEMENT
o Execute the next commands through SSHConsole session
o Use WinSCP to copy the ldquoNeeded Filesrdquo from step 1 to the management
o Select the folder ldquo1_FicherosNecesariosrdquo that contains the files from the step 1B
o Select ldquoUploadrdquo and ldquoOKrdquo
o The folder with the needed files will be copied to the path homeadmin
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 11: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/11.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 10
[Internal Use] for Check Point employees
5 UPDATE THE CPUSE AGENT
51 ONLINE UPDATE
o CPUSE Agent will be updated automatically in case the management has access to the Internet
o Go to the management web portal
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o Check if the build is higer or equal to 1439 (Date 150318)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 12: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/12.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 11
[Internal Use] for Check Point employees
52 OFFLINE UPDATE
o Download the last version of the CPUSE Agent sk92449
o Copy the download file to the management through WinSCP
o Unzip the download file tar -zxvf DeploymentAgent_ltbuildgttgz
o Install the RPM package through rpm -Uhv --force CPda-00-00i386rpm
o Stop all clish processes killall -v clish clishd
o Restart the Confd Daemon tellpm processconfd =gt tellpm processconfd t
o Start manually the CPUSE Agent daemon $DADIRbindastart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 13: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/13.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 12
[Internal Use] for Check Point employees
6 SMARTCONSOLE R773003 E8081 INSTALLATION
o Execute the download file from step 1 gt List A gt File 3
SmartConsole for Endpoint Security Server R773003 E8081 gt Download
o Install the exe file following next steps with the default options
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 14: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/14.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 13
[Internal Use] for Check Point employees
7 LICENSES CREATION (JUST NEEDED DURING A POC)
Create the needed licenses through the UserCenter
o Endpoint Management License All-In-One
The license file (CPLicenseFilelic) will be sent to the email address chosen through the form
o Licenses to be able to use the Endpoint agent software and his blades (maacuteximum 100 seats)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 15: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/15.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 14
[Internal Use] for Check Point employees
8 Select ldquoClick hererdquo
9 Select ldquoLicenserdquo to link the license to your Management IP Addresses
Yoursquoll be able to download a licenses file like
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 16: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/16.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 15
[Internal Use] for Check Point employees
8 LICENSES INSTALLATION
During the previous step (7) we got the next license files
CPLicenseFilelic
CPLicenseFile_27F36B4CED37_CPSB-COMPLETE-EVALlic
1 Open SmartUpdate
2 Import your license files
3 The files will do automatically the ldquoAttachmentrdquo process
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 17: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/17.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 16
[Internal Use] for Check Point employees
9 CONTRACTS INSTALLATION
1 Open SmartUpdate
2 Update the contracts from the UserCenter
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 18: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/18.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 17
[Internal Use] for Check Point employees
10 ACTIVACIOacuteN DE ENDPOINT POLICY MANAGEMENT
o Open SmartDashboard
o Edit the Management object
o Check ldquoEndpoint Policy Managementrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 19: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/19.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 18
[Internal Use] for Check Point employees
11 ENABLE SMARTLOG
o Open SmartDashboard
o Edit the Management object
o Check ldquoSmartLogrdquo and click ldquoOKrdquo
o Do ldquoInstall Databasehelliprdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 20: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/20.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 19
[Internal Use] for Check Point employees
12 JUMBO HOTFIX INSTALLATION FOR ENDPOINT SERVER
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R7730_jhf_T143_EP
[Expertendpoint-poc0] tar -xvzf R7730_jhf_T143_EPtgz -C R7730_jhf_T143_EP
[Expertendpoint-poc0] cd R7730_jhf_T143_EP
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
13 JUMBO HOTFIX R773003 INSTALLATION FOR GAIA
Execute the next commands through SSHConsole session
[Expertendpoint-poc0] cd homeadmin1_FicherosNecesarios
[Expertendpoint-poc0] mkdir R773003_Gaia
[Expertendpoint-poc0] tar -xvzf R773003_Gaiatgz -C R773003_Gaia
[Expertendpoint-poc0] cd R773003_Gaia
[Expertendpoint-poc0] UnixInstallScript
[helliphellip]
Do you want to continue (yn) y
[helliphellip]
Installation program completed successfully
Do you wish to reboot your machine (yn) y
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 21: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/21.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 20
[Internal Use] for Check Point employees
14 UPDATE TO THE LATEST JUMBOHOTFIX
o Go to the Management Web Portal After the Endpoint Policy Management activation you should get access through 4434
https[Direccioacuten_IP]4434
NOTE In case you donrsquot get Access go again through the step 10
o Select Upgrades (CPUSE) gt ldquoStatus and Actionsrdquo
o ldquoCheck for Updatesrdquo
o Install the latest Jumbo Hotfix Accumulator Takehellip
o The VM will automatically reboot
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 22: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/22.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 21
[Internal Use] for Check Point employees
15 IMPORT THE ENDPOINT PACKAGES
o Open SmartEndpoint and select No
o Open the package repository
o Import the container folder with all of the Endpoint packages previously downloaded from (Step 1 gt List A gt File 2)
NOTE In case the SmartConsole gets frozen and doesnrsquot end uploading the packages go through Appendix III
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 23: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/23.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 22
[Internal Use] for Check Point employees
16 ENDPOINT CLIENT DEPLOYMENT
o Open SmartEndpoint
o Create a Virtual Group for the Deployment select ldquoNextrdquo and ldquoFinishrdquo
o Create a Deployment Rule for the Virtual Group created
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 24: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/24.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 23
[Internal Use] for Check Point employees
o Install Policy
o Download ldquoInitial Clientrdquo
The machines with Initial Client installed will be under your Virtual Group POC_VG created previously and will get the blades you chose above
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 25: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/25.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 24
[Internal Use] for Check Point employees
APPENDIX I HELP RESOURCES
Endpoint Security Server
R773003 Management Endpoint Security Release Notes gt Download
R773003 Endpoint Security Management Administration Guide gt Download
Endpoint Security Clients
E8081 Endpoint Security Client for Windows User Guide gt Download
E8081 Endpoint Security Client for Windows Release Notes gt Download
Tools
SandBlast Agent Remediation Manager for Administrators gt Download
This admin tool have the end user features and add the next ones
- Quarantine ndash Send files to quarantine
- Delete ndash Use the SandBlast Agent Remediation Service to delete a file
- Import ndash Import a quarantine file from a different Endpoint
E8081 Full Disk Encryption Offline Management Tool gt Download
This tool lets offline manage the users and give them a password to recovery their password and hard drives
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 26: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/26.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 25
[Internal Use] for Check Point employees
APPENDIX II ESXESXI DOESNrsquoT DETECT THE HARD DRIVE (SK7440)
If your ESXEXi doesnrsquot detect the hard drive added itrsquos due to the hard drive cpntroller
Select one of this SCSI Controllers ldquoLSI Logic Parallelrdquo or ldquoLSI Logic SASrdquo
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 27: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/27.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 26
[Internal Use] for Check Point employees
APPENDIX III SMARTENDPOINT CONSOLE CRASHES WHEN
UPLOADING ENDPOINT PACKAGES (SK121722)
If your SmartEndpoint crashes when uploading Endpoint packages can be due to
o Third-party Anti-Malware software prevents Endpoint packages from being uploaded to the server
o User who installs and runs SmartConsole does not have administrator privileges
o There is a missing folder on the server or missing files inside the optCPsuite-R77fw1confSMC_Filesuepmrecimg folder
To solve the last cause issue follow next steps
o Run cpstop
o Run cd optCPsuite-R77fw1confSMC_Filesuepm
o Run mkdir recimg
o Run chmod 2760 recimg
o Copy lastdll amd lasttxt from another running environment to the recimg If you donrsquot have a previous environment open a ticket with the support
o Run cd recimg
o Run chmod 660
o Run cpstart
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![Page 28: Endpoint Management Deployment · 2019-03-18 · ©2018 Check Point Software Technologies Ltd. All rights reserved | P. 1 [Internal Use] for Check Point employees Content Endpoint](https://reader033.documents.pub/reader033/viewer/2022041802/5e51eff941411a6ce6016829/html5/thumbnails/28.jpg)
copy2018 Check Point Software Technologies Ltd All rights reserved | P 27
[Internal Use] for Check Point employees
![©2011 Check Point Software Technologies Ltd. | [Unrestricted] For everyone Check Point Endpoint Security, 3D malware protection and data security Michael.](https://static.documents.pub/doc/80x56/551b24db55034607418b5cd1/2011-check-point-software-technologies-ltd-unrestricted-for-everyone-check-point-endpoint-security-3d-malware-protection-and-data-security-michael.jpg)
