Preparing Smartevent In The Multi-Domain Server Environment - Check Point Smart-1 205 Guía De Introducción

Configuring SmartEvent
3. Install the database on all log servers from which SmartEvent reads data: select
Policy > Install Database and select the log servers as the targets.
4. To allow the SmartEvent server to block attacks from specific IP addresses,
configure the Security Management Server to accept SAM commands from the
SmartEvent server:
a) On the Security Management Server, edit the
$CPDIR/conf/sic_policy.conf file:
Search for the section [Inbound rules], and add the following line under #
sam proxy:
DN_Mgmt ; Reporting_Tool; ANY; sam ; sslca
b) From the command line in the Security Management Server computer, run the
following commands:
cpstop
cpstart
Preparing SmartEvent in the Multi-Domain
Server Environment
To connect SmartEvent to one Domain, define the SmartEvent object in the
SmartDashboard of the Domain.
This procedure shows how to connect SmartEvent to all Domains.
To connect SmartEvent to all Domains:
The first stage configuring SmartEvent is to establish connectivity between the
components.
1. Launch Global SmartDashboard to the Multi-Domain Server.
a) In SmartDashboard, create a new host for each computer that contains a
component of SmartEvent:
b) Select Manage > Network Object > New > Check Point > Host.
c) In the General Properties window, click Communication and enter the
activation key.
28 | Smart-1 205/210 Appliances Getting Started Guide