topic Re: SIC in Training and Certification

SIC

Khanhdc_1509 — Fri, 27 Dec 2024 08:06:20 GMT

I don't understand how the 3-component architecture works and how the certification(SIC) process works?

Re: SIC

PhoneBoy — Fri, 27 Dec 2024 22:58:34 GMT

There are three main pieces: Gateway, Management, and SmartConsole/API.

Gateways do the enforcement of the Access Policy and Threat Prevention
Management is where the policy and logs are defined/stored as well as the Internal Certificate Authority (ICA)
SmartConsole/API is the front end used to create/update the various elements of your access policy

Gateways and Management run on physical appliances or virtual machines that run a purpose-built operating system.
SmartConsole runs on a Windows machine, but you can also use a web browser and/or REST API to manage many functions.

SIC (Secure Internal Communication) secures communication between all components (SmartConsole/API to Management, and Management/Gateway communication).
As gateways are onboarded to management, they are issued a certificate from the ICA, which is used to authenticate and encrypt all communications.
This is done through industry-standard TLS.

Re: SIC

the_rock — Sat, 28 Dec 2024 00:18:58 GMT

To add on top what @PhoneBoy said, I would ensure you allow all communication between mgmt and gateways.

Andy

Re: SIC

Don_Paterson — Sat, 28 Dec 2024 09:30:42 GMT

You can use these commands to see the ICA database on the Security Management Server and the SIC trust state on the Security Gateway:

cpca_client lscert

cp_conf sic state

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_CLI_ReferenceGuide/Content/Topics-CLIG/FWG/cp_conf-sic.htm

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG/MDSG/cpca_client.htm

Re: SIC

Khanhdc_1509 — Sun, 29 Dec 2024 08:32:27 GMT

Also when I deploy standalone how are the CPU resources shared, 50-50?
and Can the admin port assign data ports to access the admin? If so, can other ports be blocked from accessing the admin?

Re: SIC

Don_Paterson — Sun, 29 Dec 2024 09:45:50 GMT

https://community.checkpoint.com/t5/The-CheckMates-Blog/Welcome-to-Check-Point-for-Beginners/ba-p/31877

Re: SIC

PhoneBoy — Mon, 30 Dec 2024 16:28:40 GMT

The resources are shared, but not exactly 50/50.
You can restrict access to the administrative functions, yes.