Configure Check Point Security Gateway using Custom Data

Follow the Aviatrix Firewall Network (FireNet) workflow to Launching and Associating Firewall Instance to launch the firewall instance.

To configure the Check Point Security Gateway using Custom Data:

  1. Navigate to the Aviatrix Controller > Firewall Network > Setup > Firewall > Launch & Associate Firewall Instance.

  2. Fill in the required fields. Click the Advanced checkbox.

  3. Fill in the following parameters. You must specify a custom username and password, and generate a hash string for the password.

Advanced Field Example Value

User Data

Bootstrap Configuration
cp_bootstrap_example

Below is a sample Check Point Bootstrap Configuration to configure firewall "Allow-all" policy, health check policy and RFC 1918 static routes is shown below:

#!/bin/bash

clish -c "set user <user> password-hash <100+ character hash string>" -s
clish -c 'set interface eth1 state on' -s
clish -c 'set hostname checkpoint' -s
blink_config -s 'upload_info=false&download_info=false&install_security_gw=true&install_ppak=true&install_security_managment=false&ipstat_v6=off&ftw_sic_key=<password>'

  1. Launch the instance. Wait 15 minutes for it to boot up and initialize.

  2. Log into the HTTPS interface of the public IP with the username and password specified in the Bootstrap Configuration file.