1. Home
  2. Networking
  3. Check Point FireWall

Chapter 4. Building Your Rulebase

This chapter covers how to build a basic rulebase. I begin by discussing how to set up access to the FireWall-1 Management GUIs (i.e., SMART Clients). I then discuss the different kinds of objects you can create. Next, the various components that make up your rulebase, including the rulebase properties and anti-spoofing, are explained. Finally, I cover the topic of making a rulebase, including certain rules that should appear in every rulebase.

By the end of this chapter, you should be able to:

  • Understand what the Management GUIs do

  • Control access to the Management GUIs

  • Understand the order in which anti-spoofing, rulebase properties, and the rules themselves are actually applied

  • Determine which rules should be in every rulebase

  • Create a rulebase



    		Frequently Asked Questions
    		Preface
    		Chapter 1. Introduction to Firewalls
    		Chapter 2. Planning Your FireWall-1 Installation
    		Chapter 3. Installing FireWall-1
    		Chapter 4. Building Your Rulebase
    		The Management GUIs
    		The Rulebase Components
    		The Rulebase
    		Making Your First Rulebase
    		Frequently Asked Questions
    		Troubleshooting
    		Summary
    		Chapter 5. Logging and Alerting
    		Chapter 6. Common Issues
    		Chapter 7. Remote Management
    		Chapter 8. User Authentication
    		Chapter 9. Content Security
    		Chapter 10. Network Address Translation
    		Chapter 11. Site-to-Site VPN
    		Chapter 12. SecuRemote and SecureClient
    		Chapter 13. High Availability
    		Chapter 14. INSPECT
    		Appendix A. Securing Your Bastion Host
    		Appendix B. Sample Acceptable Usage Policy
    		Appendix C. 'firewall-1.conf' File for Use with OpenLDAP v1
    		Appendix D. 'firewall-1.schema' File for Use with OpenLDAP v2
    		Appendix E. Performance Tuning
    		Appendix F. Sample 'defaultfilter.pf' File
    		Appendix G. Other Resources
    		Appendix H. Further Reading