CloudLabBox
Try the free demo

Check Point CCSA lab 1 of 14

Gaia and the three-tier architecture

Meet the Check Point three-tier architecture on real R81.20 images: explore Gaia's clish and expert shells on the management server and the gateway, read licences and process state, open the management API to GUI clients, and reach the Gaia Portal and Web SmartConsole from an admin browser.

Run this lab

It needs Standard: its 4 nodes are set to 8 vCPU and 14,848 MB in total.

In your workspace: Shared, then Check Point CCSA guided labs, then 01 - Gaia and the three-tier architecture

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 8 vCPU and 14,848 MB together. Every lab plan includes every guided lab.

Level
Beginner
Time
About 60 minutes
Nodes need
8 vCPU, 14,848 MB
Smallest plan
Standard

The scenario

Northgate Retail has bought Check Point to protect its head office. The installer has finished the first-time wizards: SMS is the Security Management Server, HQ-GW the head-office gateway. Before anyone writes a policy, you are going to learn your way around both boxes and make sure administrators can reach the management server from their browsers.

What you’ll practise

  • Name the three tiers (SmartConsole, Security Management Server, Security Gateway) and what each does
  • Navigate Gaia clish and expert mode, and know which to use for what
  • Read version, interfaces, routes, licences and process state with Gaia and Check Point commands
  • Make the management API accept GUI clients and confirm it is ready
  • Reach the Gaia Portal and Web SmartConsole from a browser

The tasks

  1. Explore the gateway
  2. Explore the management server
  3. A small Gaia change
  4. Open the API to GUI clients
  5. The admin browser
  6. Draw it

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Gaia and the three-tier architecture4 nodes and 1 network, 4 links. Every link is listed as text below the diagram.SMSHQ-GWADMIN-PCHQ-PCHQ-LANeth0eth0eth0eth0
4 nodes and 1 network, with the interface names each link uses.
Every link, as text
  • SMS eth0 to HQ-LAN (network)
  • HQ-GW eth0 to HQ-LAN (network)
  • ADMIN-PC eth0 to HQ-LAN (network)
  • HQ-PC eth0 to HQ-LAN (network)
Nodes in Gaia and the three-tier architecture, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
SMSCheck Point Security Management Servercpsms-R81.20-Licensed4 vCPU, 8,192 MB
HQ-GWCheck Point Security Gateway VE (cpsg template)cpsg-R81.20-Licensed2 vCPU, 4,096 MB
ADMIN-PCEVE-NG Firefox browser (Docker)eve-firefox:latest1 vCPU, 2,048 MB
HQ-PCAlpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder Check Point CCSA guided labs.

  3. Open 01 - Gaia and the three-tier architecture and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More Check Point CCSA labs

All Check Point CCSA labs

CloudLabBox is independent of Check Point and Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.