Avaya BaySecure FireWall-1 User Manual

Configuring BaySecure Firewall-1

BayRS Version 13.00
Site Manager Software Version 7.00

Part No. 303515-A Rev 00
October 1998

4401 Great America Parkway 8 Federal Street
Santa Clara, CA 95054 Billerica, MA 01821

Copyright © 1998 Bay Networks, Inc.

All rights reserved. Pr inted in the USA. October 1998.
The information in this document is subject to change without notice. The statements, configurations, technical data,

and recomm endations in this document are believed to be accurate and reliable, but are presented without express or
implied warranty. Users must take full responsibility for their appli cations of any products s pecified in this document.
The information in this document is proprietary to Bay Networks, Inc.

The software described in this document is furnished under a license agreement and may only be used in accordance
with the te rms of that license. A summary of the S oftware License is included in this document.

Trademarks

ACE, AFN, AN, BCN, BLN, BN, BNX, CN, FRE, LN, Optivity, PPX, Quick2Conf ig, and Bay Networks are
registered tradema rks and Advanced Remote Node, ANH, ARN, ASN, BayRS, BaySecure, BayStack, BayStream,
BCC, BCNX, BLNX, EZ Install, EZ Internetwork, EZ LAN, FN, IPAutoLearn, PathMan, RouterMan, SN, SPEX,
Switch Node, System 5000, and the Bay Netw orks logo are trademarks of Bay Networks, Inc.

Microsoft , MS, MS-DOS, Win32, Windows, and W indows NT are r egistered tr ademarks of Microsoft Corporation.
All other trademarks and registered trademarks are the property of their respective owners.

Restricted Rights Legend

Use, duplication, or disclosure b y the United States Government is subject to restrict ions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013.

Notwithstanding any other license agreement th at may pertain to, or accompany the delivery of, this com puter
software, the rights of the Unite d States Government regarding its use, reproduction, and disclosure are as set forth in
the Commercial Computer Software-Restricted Rights clause at FAR 52.227-19 .

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, Bay Networks, Inc. reserves the
right to make changes to the products described in this document with out notice.

Bay Networks, Inc. does not assume any liability that may occur due to the use or application of the product( s) or
circuit layout(s) described herein.

Portions of the code in this software product may be Copyright © 1988, Regents of the University of California. All
rights reserved. Red istribution and use in source and binary forms of such portions are permit ted, provided that the
above copyright notice and this paragraph are duplicated in all such forms and that any documentation, advertising
materials, and other materials related to such distribution and use acknowledge that such portions of the software were
deve loped by the Uni versity of California, Berkeley. The name of the University may not be used to endorse or
promote products derived from such portions of the software without specific prior written permission.

SUCH PORTIONS OF THE SOFTWARE ARE PROVIDED “AS IS” AND WITHOUT ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIE D WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

In additi on, the program and information contained herein are lice nsed only pursuant to a license agreement that
contains restrictions on use and discl osure (that may incorporate by reference certain limitations and notices imposed
by thir d pa rt ie s).

ii

303515-A Rev 00

Bay Networks, Inc. Software License Agreement

NOTICE: Please carefully read this license agreement before copying or using the accompanying software or
instal ling the hardware unit w ith pre-enabled software (each of w hich is referred to as “Software” in this Agree m ent).
BY COPYING OR USING THE SOFTWARE, YOU ACCEPT ALL OF THE TERMS AND CONDITIONS OF
THIS LICENSE AGREEMENT. THE TERMS EXPRESSED IN THIS A GREEM ENT ARE THE ONLY TERMS
UNDER WHICH BAY NETWORKS WILL PERMIT YOU TO USE THE SOFTWARE. If you do not accept these
terms and conditions, return the product, unused and in the original shipping container, within 30 days of purchase to
obtain a credit for the full purchase price.

1. License Grant. Bay Networks, Inc. (“Bay Networ ks”) grants the end user of the Softwar e (“Licensee”) a personal,
nonexcl usive, nontransferab le license: a) t o use the Software either on a singl e com puter or, if applicable, on a single
authori zed de vi ce ide ntified by hos t ID, fo r whi ch it wa s ori gi nal ly acq uir ed ; b) to cop y th e Sof tw ar e so lely f or bac kup
purposes in support of author ized use of the Software; and c) to use and copy the associated user manual solely i n
support of authorized use of the Software by Licensee. This license applies to the Software only and does not extend
to Bay Networks Agent softw are or other Bay Networks softw are products. Bay Networks Agent software or other
Bay Networks software products are licensed for use under the terms of the applicable Bay Networks, Inc. Software
License Agreement that accompanies such software and upon payment by the end user of the applicable licen se fees
for such software.

2. Restrictions on use; reservation of rights. The Software and user manuals are protected under copyr ight laws.
Bay Networks and/or its licensors retai n all title and ownership in bot h the Software and user manuals, including any
revis ions made by Bay Networks or its li censors. The copyright noti ce m ust be reproduced and included with any
copy of any por tion of the Sof tw are or use r manua ls . Licens ee may not modif y, trans late , dec ompi le, di sas semb le, use
for any compe ti ti v e an al ysis, r e v erse e ngi ne er , dis tr ib ute , o r c rea te der i vativ e w ork s fro m th e Sof twa re or u se r man ual s
or any copy, in whole or in part. Except as expressly provided in this Agreement, Licensee may not copy or transfer
the Softw are or user manual s, in whole or in part. The Software and user manuals embody Bay Networks’ and its
licenso rs’ confident ial and proprietary intellectual property. Licensee shall not sublicense, assign, or other w ise
disclos e to any third pa rty the Software, or any information abou t the operation, design, performance, or
implementation of the Software and us er manuals that is confidential to Bay Networks and its li censors; how ever,
Licensee m ay grant permission to its consul tants, subcontractors , and agents to use the Software at License e’s facility,
provided they have agreed to use the Software only in accordance with the term s of this license.

3. Limited warranty. Bay Networks warrants each item of Softwa re, as delivered by Bay Networks and properly
installed and operated on Bay Networks har dw are or other equipment it is ori ginally licensed for, to function
substantially as descri bed in its accomp anying user manual during its warranty period, which begi ns on the date
Softwar e is fi r st shi pped to Licen see . If any it em of Soft war e fai ls to so func ti on du ring i ts warr anty pe ri od, as t he so le
remedy Bay Ne tworks will at its discretion provide a suitable fi x, patch, or workaround for the problem that may be
included in a future Software release. Bay Networks further warrants to Licensee that the media o n which the
Softwar e is provided will be free from defects in materials and workmans hip under norm al use for a period of 90 days
from the date Software is first shi pped to Licensee. B ay Networks will replace defectiv e media at no charge if it is
returned to Bay Networks during the warrant y period along with proof of the date of shipment. This w arranty d oes not
apply i f the media has been d amaged as a result of accident, misuse, or abuse. The Licens ee assumes all responsibility
for selection of the Software to achieve Licensee’s intended results and for the installation, use, and results obtained
from the Software. Bay Ne tworks does not warrant a) tha t the functions contained in the software will meet the
Licensee ’s requirements, b) that the Sof tware will operate in the hardware or software comb inations that the License e
may select, c) that the operation of the Software will b e uninterrupted or error free, or d) that all defects in the
operati on of the Softw are will be corrected. Bay Networks i s not obligated to remedy any Software defect that cannot
be repro duced with the latest Software release. These warranties do not apply to the Software if it has been (i) altered,
except by Bay Networks or in accordance with its instructions; (ii) used in conjunction with another vendor’s product,
resulting in the defect; or (iii) damaged by improper environment, abuse, mi suse, accident, or negligence. THE
FOREGOING WARRANTIES AND LIMITATIONS ARE EXCLUSIVE REMEDIES AND ARE IN LIEU OF ALL
OTHER WARRANTIES EXPRESS OR I MPLIED, INCLUDI NG WITHOUT LIMITATION ANY WARRANTY OF
MERCHANTABILITY OR FITNESS FOR A P ARTICULAR PURPOSE. Licensee is responsible for the security of

303515-A Rev 00

iii

its own data and inform ation and for mai ntaining adequate procedures apart from the Software t o reconstruct lost or
altered files, data, or programs.

4. Limitation of liability. IN NO EVENT WILL BAY NETWORKS OR ITS LICENSORS BE LIABLE FOR ANY
COST OF SUBSTITUTE PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
DAMAGES ; OR ANY DAMAGES RESULTING FROM INACCURATE OR LOST DATA OR LOSS OF USE OR
PROFITS ARISING OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE SOFTWARE, EVEN
IF BAY NETWORKS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT
SHALL THE LIABILITY OF BAY NETWORKS RELATING TO THE SOFTWARE OR THIS AGREEMENT
EXCEED THE PRICE PAID TO BAY NETWORKS FOR THE SOFTWARE LICENSE.

5. Government L i c en s ees. This provision applies to all Software and documentation acquired directly or indirectly
by or on behalf of the United States Government. The Software and documentation are commercial products, licensed
on the open market at market p rices, and were developed ent irely at pri vate expense and without the use of any U.S.
Government funds. The license to the U. S. Governmen t is granted only with restricted rights, and use, duplica tion, or
disclos ure by the U.S. Go vernment is subject to the restrictions set forth in subparagraph (c)(1) of the Comm ercial
Computer So ftware––Restricted Rights clause of FAR 52.227-19 and the limitations set out in this license for c ivilian
agencies , and subparagra ph (c)(1)(ii) of the Rights in Technical Data a nd C om p uter Software clause of DFARS

252.227-7013, for agencies of the Department of Defen se or their successors, whichever is applicable.

6. Use of Software in the European Communit y. This pr ovision applies to all Software acquired for use within the
European Comm unity. If Licensee uses the Software within a country in the European Com mu n ity, t he Software
Directive enacted by the Council of European Communities Directive dated 14 May , 1991, will apply to the
examination of the Softw are to facili tate interoperability. Licensee agrees to notify Bay Networks of any such
intended examination of the Software and may procure support and assis tance from Bay Networks.

7. Term and termination. This license is effective until terminated; however, all of the restrictions with respect to
Bay Networks’ copyright in the Software and user manuals will cease being effective at the date of expiration of the
Bay Networks copyright; those restrictions relating to use and discl osure of Bay Networ ks’ confidential information
shall continue in effect. Licensee may terminate this license at any time. The license will automatically terminate if
Licensee fails to comply with any of the terms and conditions of the license. Upon termination for any reason,
Licensee will immediately destroy or return to Bay Networks the Software, user manuals, and all copies. Bay
Networks is not liable to Licensee for damages in any form so lely by reason of the terminati on of this license.

8. Export and Re-export. License e agrees not to export, directly or indirectly, the Software or related technical data
or information without first obtaining any required export licenses or other governmental approvals. Without limiting
the fore going, Licensee, on behalf of itself and its subsidiari es and affiliates, agrees that it wil l not, without first
obtaining all export licenses and appr ovals required by the U.S. Governmen t: (i) export, re-export, transfer, or divert
any such Sof tware or technical data, or an y direct product thereof, to any country to whi ch such exports or re-exports
are rest ricted or embargoed under United States ex port control laws and regu lations, or to any national or resident of
such rest ricted or embargoed countr ies; or (ii) provide the Software or related technical data or infor mation to any
military end user or for any m ilitary end use, including the design, development, or production of any chemical,
nuclear, or biological weapons.

9. General. If any provision of this Agreement is held to be invalid or unenforceable by a court of competent
jurisdiction, the remainder of the provisions of this Agreement shall remain in full force and effect. This Agreement
will be governed by the laws of the state of California.

Should you have any quest ions concerning this Agreement, contact Bay Networks, Inc., 4401 Great America
Parkway, P.O. Box 58185, Santa Clara, California 95054-8185.

LICENSEE ACKNOW LEDGES THAT LICENSEE HAS READ THIS AGREEMENT , UNDERSTANDS IT, AND
AGREES TO BE BOUND BY ITS TERMS AND CONDITIONS. LICENSEE FUR THER AGREES THAT THIS
AGREEMENT IS THE ENTIRE AND EXCLUSIVE AGREEMENT BETWEEN BAY NETWORKS AND
LICENSEE, WHICH SUPERSEDES ALL PRIOR ORAL AND WRITTEN AGREEMENTS AND
COMMUNICATIONS BETWEEN THE PARTIES PERTAINING TO THE SUBJECT MATTER OF THIS
AGREEMENT. NO DIFFERENT OR ADDITIONAL TERMS WILL BE ENFORCEABLE AGAINST BAY
NETWORKS UNLESS BAY NETWORKS GIVES ITS EXPRESS WRITTEN CONSENT, INCLUDING AN
EXPRESS WAIVER OF THE TERMS OF THIS AGREEMENT.

iv

303515-A Re v 00

Contents

Preface

Before You Begin ..............................................................................................................ix

Text Convent io n s ..... ................................................ ........................................................ . .x

Acronyms .......................................................................................................................... x i

Bay Networks Technical Publications ...............................................................................xi

How to Get Help ...............................................................................................................xii

Chapter 1
BaySecure FireWall-1

Managing Firewall Operation .......................................................... ....... ..... ....... ....... ......1-1

How the Firewall Software Works ............................................................................1-2

Where You Should Go from Here ................................................................................... 1-2

Chapter 2
Installing FireWall-1 Management Software

Obtaining Software Licenses .......................................................................................... 2-1

Obtaining a FireWall-1 License for the Management Station ...................................2-2

Sample Response from Check Point .... .............................................................2-3

Obtaining a FireWall-1 License for the Router .........................................................2-4

Sample Response from Check Point .... .............................................................2-5

Installing and Running the FireWall-1 Management Software ........................................2-5

Installing on a Computer Running Windows NT ......................................................2-5

Sample Installation ............................................................................................2-6

Customizing the FireWall-1 Installation ...........................................................2 -12

Installing on a UNIX Platform ................................................................................. 2 -13

Before You Install .............................................................................................2-13

Mounting the CD and Extracting the Tar File ...................................................2-13

Installing the Check Point FireWall-1 Software ................................................ 2 -14

Installa tion Options ..........................................................................................2-14

Sample Installation .......................................................................................... 2 -14

303515-A Rev 00

v

Customizing the FireWall-1 Installation ...........................................................2 -18

Installing a License on the Management Station .............................................2-19

Starting and Stopping the FireWall-1 Daemons . .............................................2-19

Synchronizing the Management Station and the Router Passwords ...............2-19

Starting FireWall-1 ...........................................................................................2-20

Chapter 3
Configuring a Firewall on a Router

Creating a Firewall on the Router ...................................................................................3-1

Before You Begin ...................................................................................................... 3-2

Using Site Manager ..................................................................................................3-2

Enabling or Disabling the Firewall on the Router ............................................................3-4

Setting Up Communications Between the Firewall Management Station

and the Router . ...............................................................................................................3-4

Establishing the Firewall Management Station ........................................................3-4

Establishing a Static Route ................................................................................3-5

Identifying the Router ...............................................................................................3-5

Enabling the Firewall on Router Interfaces .....................................................................3-6

Activating the Firewall .....................................................................................................3-9

Defining a Firewall Security Policy ................................................................................3-11

Installing the Security Policy on the Router and Its Interfaces ...................................... 3 -11

Deleting Firewall from the Router .................................................................................3-12

Deleting Firewall Locally or Remotely Using Site Manager ...................................3-12

Deleting Firewall Dynamically Using the Technician Interface ...............................3 -13

Troubleshooting Checklist ................................ .......... .. ....... .......... .. ....... ....... .......... .. ....3-14

Appendix A
Parameter Descriptions

FireWall Enable Parameter ........................................................................... .......... .. .....A-1

FireWall Par a mete r s ............ ............................................... ...........................................A-2

List FireWall Interfaces Parameters ...............................................................................A-3

Index

vi

303515-A Re v 00

Figures

Figure 2-1. Choose Destination Location Window ............................ ..... .. ..... ..... .. ..... .2-6

Figure 2-2. Selecting Product Type Window .......................................... ....... ....... ..... .2-7

Figure 2-3. Licenses Window ..................................................... ....... ....... ..... ....... ......2-8

Figure 2-4. Administrators Window ............................................................................2-9

Figure 2-5. Add Administrators Window . ....................................................................2-9

Figure 2-6. Key Hit Session Window ................ ..... ..... .... ..... ..... .. ..... .. ..... .. ..... ..... .. ....2-10

Figure 2-7. Choose Destination Location Window ............................ ..... .. ..... ..... .. ....2-11

Figure 2-8. Select Components Window ..................................................................2-12

Figure 3-1. Configuration Manager Window ...............................................................3-2

Figure 3-2. Create Firewall Dialog Box .......................................................................3-3

Figure 3-3. List Firewall Interfaces Window ......................... ....... ..... ....... ....... ....... ..... .3-7

Figure 3-4. Values Window ................ .. ..... .. ..... ..... .. ..... .. ..... ..... .. ..... ..... .... ..... ..... .. ..... .3-8

Figure 3-5. Boot Router Window ..............................................................................3-10

303515-A Rev 00

vii

This guide describes BaySecure™ FireWall-1, and the steps you need to take to
install, configure, and activate a firewall on a Bay Networks® router.

Before You Begin

Before using this guide, you must complete the following procedures. For a new
router:

• Install the router (refer to the installation guide that came with your router).

• Connect the router to the network a nd create a pilot configuration f ile (refer to

Quick-Starting Routers, Configuring BayStack Remote Access, or Connecting
ASN Routers to a Network).

Preface

303515-A Rev 00

Make sure that you are running the latest version of Bay Networks Site Manager
and router software . F or instructions, refer to the upgrade guide.

You will also need to consult the FireWall-1 document from Check Point
Technologies.

ix

Configuring BaySecure FireWall-1

Text Conventions

This guide uses the following text conventions:

angle brackets (< >) Indicate that you choose the text to enter based on the

description inside the brackets. Do not type the
brackets when entering the command.
Example: If the command syntax is:

bold text

<ip_address>

ping
ping 192.32.10.12

Indicates text tha t you need to enter and command

, you enter:

names and options.
Example: Enter

Example: Use the

show ip {alerts | routes

command.

dinfo

}

italic text Indicates file and directory names, new terms, book

titles, and variables in command syntax descriptions.
Where a variable is two or more words, the words are
connected by an underscore.
Example: If the command syntax is:

<

show at

valid_route

valid_route>

is one va riable and you subs titu te one value

for it.

screen text Indicates system output , fo r exa mple, prompts and

system messages.
Example:

Set Ba y Netw orks Tr ap Mo nito r Fil ters

separator ( > ) Shows menu paths.

Example: Protocol s > IP identifie s the IP option on the
Protocols menu.

|

vertical line (

) Separates choices for command keywords and

arguments. Enter only one of the choices. Do not type
the vertical line when entering the command.
Example: If the command syntax is:

, you enter either:

show ip {alerts | rou tes
show ip alerts

x

or

}

show ip routes

, but not both.

303515-A Re v 00

Acronyms

GUI graphical user interface
IP Internet Protocol
LAN local area networ k
MIB management information base
OSI Open Systems Interconnec tion
TCP/IP Tra nsmission Control Protocol/Internet Protocol

Bay Netwo rks Technical Publications

You can now print Bay Net wor ks technical manuals and release notes free,
directly from the Int ernet. Go to support.bayn etworks.com/libr ary/tpubs/. Fi nd the
Bay Networks product for which you need doc umenta tion. Then locate the
specific category and model or version for your hardware or software product.
Using Adobe Acrobat Reader, you can open the manuals and release note s, sear ch
for the sections you need, and print them on most standard printers. You can
download Acrobat Reader free from the Adobe Systems Web site,
www.adobe.com.

Preface

303515-A Rev 00

You can purchase Bay Networks documentation sets, CDs, and selected te ch nical
publications through the Bay Networks Collateral Catalog. The catalog is loc ated
on the World Wide Web at support.baynetworks.com/catalog.html and is divided
into sections arran ged alpha betically:

• The “CD ROMs” section lists available CDs.

• The “Guides/Books” section lists books on technical topics.

• The “Technical Manuals” section lists available printed documentation sets.
Make a note of the part numbers and prices of the items that you want to order.

Use the “Marketing Collateral Catalog description” link to place an order and to
print the order form.

xi

Configuring BaySecure FireWall-1

How to Get Help

For product assista nce, support contracts, or informati on abou t educational
services, go to the following URL:

http://www.baynetworks.com/corporate/contacts/

Or telephone the Bay Networks Technical Solutions Center at:
800-2LANWAN

xii

303515-A Re v 00

Chapter 1

BaySecure FireWall-1

BaySecure™ FireWall-1 builds firewall security features into Bay Networks router
software. It does this by integrating the statef ul inspection module from Version

2.1 of the Check Point Software Technologi es FireWall-1 software into the Bay
Networks router operating system of Bay Networks BN
routers. BaySecure FireWall-1 provides all of the security features from Version

2.1 of the Check Point Software Technologi es FireWall-1 software, except for
user authentication, address translation, statistics and encryption.

®

, ASN™ and ARN™

Managing Firewall Operation

A firewall is the hardware and/or software that limits the exposure of a computer
or network to an invasion from an external source. To control the operation of the
firewall on the router , you use the Check Point FireWa ll-1 management software.

You install this management software on either a computer runnin g
Windows NT or on a UNIX workstation to create a firewall management station.
From the management station, you can use the FireWall-1 management software
to define a security policy and download it to the router. The security policy
specifie s how the firewa ll operates. For instructions on how to install the
FireWall-1 management software, see Chapter 2

Management Software.” To learn how to configure a security polic y, see your

Check Point documentation .

303515-A Rev 00

, “Installing FireWall-1

1-1

Configuring BaySecure FireWall-1

How the Firewall Software Works

The stateful inspect ion module in the Bay Networks router software inspects all
data packets traveling betwee n the data link a nd network la yers an d communica tes
the results to the management station. If the data packets meet the security
requirements specified in the security policy, the router forwards the data. If the
data packets violate the security policy, the route r drops the data packe ts, and logs
the information to the management station.

Where You Should Go from Here

To get a firewa ll up and running on your Bay Networks router:

For informati on on how to Go to page

Obtain licenses fro m Chec k Point 2-1
Install the Check Point Management software 2-5
Create a firewall 3-1
Enable the firewall on the router 3-4
Establish a relat ionship between the manageme nt st ation and the router 3-4
Enable the route r on specific interfaces 3-6
Activate the firewall 3-9
Configure a firewall security policy 3-11

Install the security policy on the router 3-11

and see your
Check Poin t
FireWall-1
documentation

and see your
Check Poin t
FireWall-1
documentation

1-2

303515-A Re v 00

Chapter 2

Installing FireWall-1 Management Software

To install the FireWall-1 software, see the following sections:

T opic Page

Obtaining Software Licenses
Installing and Runni ng the FireWall-1 Management Software 2-5

Obtaining Software Licenses

Before you ca n inst all the FireWall-1 software an d crea te a firewall on the router,
you must first obta in a permanent sof tware license from Check Point Software
Technologies for:

• The fire wall management station
You need one softwar e li cense for the firewall mana gement station, a PC or

UNIX workstation used to manage t he firewall software on the Bay Networks
router.

• The router
You need one software license for each Bay Netw orks router protected by the

firewall software.

2-1

303515-A Rev 00

2-1

Configuring BaySecure FireWall-1

Obtaining a FireWall-1 License for the Management Station

To obtain a FireWall-1 license for the fir ewall management station, follow these
instructions :

You need one license for each FireWa ll-1 management station. To

Note:

obtain a license for each additional management station, you must repeat the
steps outlined in this section.

Locate your certificate key.

1.

A certificate key (serial number) is located on a sticker on the inside of the CD
folder containing the Check Point FireWall-1 management software media. If
you lose the certificate key bearing the FireW all-1 serial number, contact Bay
Networks.

Contact Check Point Software T e chnologies.

2.

To obtain a permanent license, you must contact Ch eck Poi nt with your
certif icate key information. You can reach Check Point in any of these ways:

• Via the World Wide Web at http://license.CheckPoint.com

2-2

• By sending mail to [e-mail]

• By phoning Check Point:

800-429-4391 (North America)
[phone] (outside North America)

When requesting a license, you must also be prepared to provide the IP
address of the management station on which you plan to install the license.

303515-A Re v 00

Installing FireWall-1 Management Software

Sample Response from Check Point

Your license request with the following details has been accepted.
Below you will find the corresponding license string.

We recommend printing this page and saving it in your files for future
reference.

Request Details

--------------­Certificate Key: 5xxx 5xxx fxxx
Customer Name: Bay Networks
Product: CPFW-ESC-U
Version: 3.0
Host ID: 123.123.123.123

License(s) Issued

----------------­Host ID: 123.123.123.123
Features: control
License String: 7xxxxxxx-8xxxxxxx-fxxxxxxx

License(s) Installation

----------------------­run 'fw putlic 123.123.123.123 7xxxxxxx-8xxxxxxx-fxxxxxxx control '

303515-A Rev 00

Contact Information

------------------­This Check Point product has been purchased through: Bay Networks

If you need to chang e the IP ad dres s of the Fire Wall-1 managem en t

Note:

station, contact Check Point at 800-429-4391 (North America) or
[phone] (locations outside of North America).

For information about how to install the license, refer to the section “Installing

and Running the FireWall-1 Management Software” on page 2-5 and the Check

Point FireWall-1 documentation.

2-3