Ccmse R70

Front 1

What is the difference between an MDS Manager and Container?

Back 1

MDS Manager contains Provider-1 R70 system information. MDS Container holds the CMAs. A Container can be on the same box as the Manger, or multiple Containers can be on separate hardware.

Front 2

In an environment where there are numerous Customers, what is the recommendation for MDS Containers?

Back 2

It is recommended that you use several Containers to "house" the CMAs.

Front 3

When is a point-of-presence (POP) configuration appropriate?

Back 3

When MSPs offer other services to their clients, such as Internet access, in addition to maintaining company firewalls. Using leased lines, a Customer is able to connect securely with an MSP at the POP. From the POP, the Customer can send and receive Internet data. (Example shows a CLM local to the Customer, instead of being located in the NOC)

Front 4

How many CMAs can a SecurePlatform MDS Container hold?

Back 4

500

Front 5

How many CMAs can an MDS Container on Solaris hold?

Back 5

250, because that is a Solaris limit of VIPs per NIC.

Front 6

An MLM can maintain logs for up to how many CMAs?

Back 6

250

Front 7

When using a NOC firewall, why can't you use Global Properties to manage control connections to the CMAs?

Back 7

Because the CMAs have different virtual IP addresses, and the traffic is passing through the firewall (instead of sourcing or destining from it).

Front 8

Where does Provider-1 R70 consolidate all management tasks?

Back 8

Network Operations Center

Front 9

Does an administrator with Management permissions have view options for GUI clients?

Back 9

No, that is at the MDS level.

Front 10

What is the command to disable the trial-period license on a CMA before its expiration?

Back 10

cpprod_util CPPROD_SetPnPDisable 1

Front 11

How many CMAs and how many Virtual Systems does the 15-day trial license permit?

Back 11

200 CMAs and 5 Virtual Systems.

Front 12

What are the system requirements for a Provider-1 MDS?

Back 12

Linux
- Pentium IV or 3GHz equivalent
- 2GB free disk space
- 4GB RAM
- 1+ NICs
- CD-ROM drive

Solaris
- UltraSPARC III 900MHz
(everything else is same as above)

SecurePlatform
- 10 GB free disk space
(everything else is the same)

Front 13

What is the supported version of Linux for the MDG?

Back 13

RHEL 5.0 kernel 2.6.18 only. Must have the sharutils-4.6.1-2 and compat-libstdc++-33-3.2.3-61 packages. SeLinux must be disabled.

Front 14

What packets are required for Solaris to run the MDG?

Back 14

SUNWlibc
SUNWlibCx (except Solaris 10)
SUNWter
SUNWadmc
SUNWadmfw

Front 15

What are the key directories for the MDS?

Back 15

bin
scripts
lib
conf
system
customers

Front 16

Name that env variable!
Root of MDS installation

Back 16

$MDSDIR

Front 17

Name that env variable!
Location of P1 internal utilities and resources

Back 17

$MDS_SYSTEM

Front 18

Name that env variable!
Smart Update root directory

Back 18

$SUDIR

Front 19

Name that env variable!
Root of CPsuite files (/CPsuite)

Back 19

$FWDIR

Front 20

Name that env variable!
Location of registry file

Back 20

$CPREGDIR

Front 21

Name that env variable!
Root of CPshared files (/CPshrd)

Back 21

$CPDIR

Front 22

Name that env variable!
Virtual IP of the CMA or the MDS

Back 22

$MSP_SOMEIP_ADDR

Front 23

What would be the full directory to a CMA named MyCMA?

Back 23

/var/opt/CPmds-R70/customers/MyCMA/

Front 24

What are the four directories within each CMA are separated because they contain private information for the Customer?

Back 24

$FWDIR/conf
$FWDIR/log
$CPDIR/conf
$CPDIR/registry

Front 25

What is the P1Shell?

Back 25

P1Shell is a command line shell that allows administrators to run Provider-1 CLI commands on the MDS without root permissions in both the MDS and CMA environments. (Similar to cpshell in SPLAT)

Front 26

What does the mdsconfig utility do?

Back 26

Setup the MDS parameters and assign basic configuration details, such as GUI Clients, Administrator rights, etc. (Similar to cpconfig in SPLAT)

Front 27

Define this command:
mdsenv

Back 27

Sets the environment variable for the MDS. Once the MDS environment is set, all MDS specific commands can be executed.

Front 28

Define this command:
mdsstart [-m]

Back 28

Starts the MDS and all CMAs. The -m option starts the MDS but not the CMAs.

Front 29

Define this command:
mdsstop [-m]

Back 29

Stops the MDS and all CMAs. The -m stops the MDS without stopping the CMAs.

Front 30

Define this command:
mdscmd

Back 30

A CPMI client that allows an Administrator to add or remove a Customer or use the mirror option to back up MDS information. This utility walks the Administrator through the addition or removal of Customers from the MDS, and all mdscmd commands are logged and synchronized with other MDS machines.

Front 31

Define this command:
mdsstat

Back 31

Displays the detailed information on the process status of both the MDS and CMAs.

Front 32

Define this command:
pclic printlic

Back 32

Displays all MDS licenses.

Front 33

Define this command:
cplic putlic

Back 33

Allows Administrators to add licenses to the MDS.

Front 34

Define this command:
fw mds ver

Back 34

Displays the version information of the MDS DLL.

Front 35

Define this command:
mcd

Back 35

Changed the directory within the mdserver variable for $FWDIR's current value.

Front 36

Define this command:
mdsenv [CMA name]

Back 36

Sets the environment variable for the specified CMA. Once the CMA environment is set, all CMA-specific commands can be executed. This command must be repeated, referencing the appropriate CMA, if the user intends to execute commands for a different CMA. All CMA-specific commands can only take place once the correct environment variable has been set.

Front 37

Define this command (within a CMA):
fw ver

Back 37

Displays the current version information for the CMA for which the environment is set.

Front 38

Define this command (within a CMA):
cplic printlic

Back 38

Displays all licenses assigned to the CMA for which the environment is set.

Front 39

Define this command (within a CMA):
cplic putlic

Back 39

Adds licenses to the CMA for which the environment is set.

Front 40

Which Global IPS Assign Mode does Check Point recommend for most deployments?

Back 40

Override

Front 41

Can a Remote Access VPN be configured in Global VPN?

Back 41

Nope

Front 42

Is Traditional Mode VPN supported in Global SmartDashboard?

Back 42

Nope

Front 43

What must you have in your file system PATH in order run mds_restore?

Back 43

/user/ucb - The MDS will check your logged in user account by execuring a whoami command

Front 44

What file can you edit on the CMA to define from which physical interface to branch a virtual interface?

Back 44

vip_index.conf

Front 45

Where is the Global Policy History File located?

Back 45

Each Customer's log directory, named gpolicy.log