topic Automated gateway provisioning in API / CLI Discussion

Automated gateway provisioning

Yevgeniy_Yeryom — Thu, 26 Apr 2018 10:46:44 GMT

Hello colleagues,

is it a way to automate the gateway provisioning in terms of FTW and gaia configuration?

Is it a way to deploy the FTW and gaia config together with the image by means of tools like ISOMorphic or Blink?

Actually, the provisioning could look like:
- unbox the gateway

- configure the IP address

- prepare an image containig: OS+hotfix+FTW config + gaia config

- install the image on the gateway

- during installation, the FTW and gaia config are installed

Would very appreciate your feedback.

Cheers,

Yevgeniy

Re: Automated gateway provisioning

Chris_Stevens — Thu, 26 Apr 2018 18:48:53 GMT

Hi, have You looked at sk65205

Re: Automated gateway provisioning

Tomer_Noy — Sun, 29 Apr 2018 19:19:24 GMT

Hi,

I can also suggest that you take a look at the instructions for Blink in sk120193.

One of the nice benefits of Blink is that the installation is quicker, the JHF is installed with the main image (without an extra reboot) and you can include the latest updates. Another nice feature is that you can copy the files and utility and run it via SSH / console without having to use a USB.

Both with Blink and ISOMorphic you can specify initial configuration such as first-time-wizard parameters and custom scripts.

The differences between ISOMorphic and Blink are described very nicely in this post: https://community.checkpoint.com/videos/6335-overview-of-isomorphic-and-blink

Re: Automated gateway provisioning

Yevgeniy_Yeryom — Wed, 02 May 2018 07:07:27 GMT

Hello guys, I forgot to mention, it should work also for open server.

Accoring the sksk65205, ISOmorphic supports open servers.

Do you now if also Blink supports open servers?

Cheers,

Yevgeniy

Re: Automated gateway provisioning

Yevgeniy_Yeryom — Wed, 02 May 2018 07:26:54 GMT

Hi Tomer,

thanks a lot for the info!

Re: Automated gateway provisioning

Tomer_Noy — Wed, 02 May 2018 08:24:50 GMT

Blink can perform a quick installation to a target version for an existing Gaia OS. This works very well for appliances that are already shipped with some Gaia version.

Technically, you can do this with an open server, but it has to be preinstalled with Gaia. This means that you'd need to first install it using a Gaia ISO (just until you reach the first-time-wizard), then you can use blink to do the rest.

We are thinking about ways to further improve this scenario in the future.