Check Point

This guide covers Check Point security gateways and management servers running GaiaOS.

Create a backup account

Create a dedicated Gaia user for QUARK with a read-only role. In clish:

add user netwatch-backup uid 0 homedir /home/netwatch-backup
set user netwatch-backup password
add rba user netwatch-backup roles monitorRole
set user netwatch-backup shell /etc/cli.sh
save config

The monitorRole role grants read-only access to Gaia features, which is enough for QUARK to display the configuration. The user's shell must be /etc/cli.sh (clish) — do not assign /bin/bash.

You can also create the user in the Gaia Portal under User Management > Users and assign the monitorRole role there.

Enable SSH access

SSH is enabled by default on Gaia. Verify the collector can reach the appliance on TCP port 22. To restrict where administrative connections may originate, define allowed hosts in the Gaia Portal under User Management > Allowed Clients (or with the allowed-client commands in clish) and include the collector's IP address.

Platform notes

• QUARK retrieves the Gaia configuration with show configuration in clish; expert mode is not required and the account should not be given a bash shell.
• Security policy (rulebase) content is managed by the Security Management Server / SmartConsole and is not part of the Gaia OS configuration that QUARK collects from a gateway.
• On clustered gateways, add each cluster member as a separate device so both members' configurations are versioned.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.