ibm—中國移動(dòng)checkpoint防火墻安全配置手冊(cè)v01(編輯修改稿)
2024-07-22 06:53 本頁面
【文章內(nèi)容簡(jiǎn)介】 ====================================The system uses an internal Certificate Authorityto provide Secured Internal Communication (SIC) Certificatesfor the ponents in your System.Note that your ponents won39。t be able to municatewith each other until the Certificate Authority is initializedand they have their SIC Certificate.Press 39。Enter39。 to initialize the Certificate Authority...(輸入回車開始生成證書) Internal Certificate Authority created successfully Certificate was created successfullyCertificate Authority initialization ended successfully（證書生成完成）The FQDN (Fully Qualified Domain Name) of this Management Serveris required for proper operation of the Internal Certificate Authority.（默認(rèn)的證書名稱為FQDN）Would you like to define it now (y/n) [y] ?The management FQDN is IP350. Do you want to change it? (y/n) [n] ?Press 39。Enter39。 to send it to the Certificate Authority...（按回車鍵開始發(fā)送證書）NOTE: If the FQDN is incorrect, the Internal CA cannot function properly,and CRL retrieval will be impossible.Are you sure IP350 is the FQDN of this machine (y/n) [n] ? y FQDN initialized successfullyThe FQDN was successfully sent to the CAConfiguring Certificate39。s Fingerprint...========================================The following text is the fingerprint of this Management machine:SODA KNEE MEAT LIEN ADD LAP WISH JIBE JIM AMEN EACH SAIDDo you want to save it to a file? (y/n) [y] ? n（詢問是否將Management Server上的指紋存儲(chǔ)到文件中）generating GUIclients INSPECT codeinitial_management:Compiled OK.Hardening OS Security: Initial policy will be applieduntil the first policy is installed（在配置完成Checkpoint后，Checkpoint會(huì)將操作系統(tǒng)做一個(gè)加固，除Checkpoint GUI外，其它的任何服務(wù)都不能連接到防火墻）In order to plete the installation of moduleyou must reboot the machine.Do you want to reboot? (y/n) [y] ? n（Checkpoint將詢問是否重新啟動(dòng)，為便于使用命令行增加Checkpoint License，在此處點(diǎn)擊n）IP350[admin] cplic putlic eval 01Jan2003 dHEkKf7rtBN9eeqjJx9vxuF5EfNX5TxP4Mqp CPMPEVAL13DESNG CKCPHost Expiration Featureseval 1Jan2003 CPMPEVAL13DESNG CKCP(使用命令行增加Checkpoint License，該命令行可直接從Checkpoint 的正式License中Copy到命令行模式下)IP350[admin]syncIP350[admin]rebootcleaning up...syncing disks... doneRebooting...a) 重新啟動(dòng)后，整個(gè)CheckPoint VPN1/FW1 NG 安裝完成。 Checkpoint Firewall1 GUI安裝插入Checkpoint NG 光盤，將自動(dòng)運(yùn)行，出現(xiàn)下列界面，點(diǎn)擊Next。如果沒有自動(dòng)出現(xiàn)下列界面，光盤將會(huì)自動(dòng)運(yùn)行。 出現(xiàn)License 協(xié)議，點(diǎn)擊Next按鈕繼續(xù)。出現(xiàn)產(chǎn)品安裝菜單，內(nèi)含兩大項(xiàng)——SERVER/GATEWAY COMPONENTS和MOBILE/DESKTOP
環(huán)評(píng)公示相關(guān)推薦
鄂ICP備17016276號(hào)-1