 |
Mac OS
|
||||||||||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
|
|
|||||||||||||||||||
| VPN-1 SmartConsole GUI (see note 1) |
x5
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
|
x
|
x
|
|
|
|
|
|
|
|
|
| SVN Foundation and VPN-1 Pro Module |
x
|
x
|
x
|
|
x
|
x
|
x
|
|
|
|
|
|
|
x
|
x
|
x
|
x
|
x9
Also supported on IP2250 |
|
| SmartCenter Server |
x
|
x
|
x
|
|
x
|
x
|
x
|
|
|
|
|
|
|
x
|
x
|
x
|
x
|
x
|
|
| SecuRemote |
|
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
|
|
|
|
|
|
|
|
| SecureClient |
|
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
x
|
x11
|
Supported for
NG FP3 only, not on 7.0 |
x
|
|
|
x10
|
|
| SecureClient Policy Server |
x
|
x
|
x
|
x
|
x
|
x
|
|
|
|
|
|
|
|
x
|
|
x
|
x
|
x9
Also supported on IP2250 |
|
| FloodGate-1 (Supported for Management Add-on Only) |
x
|
x
|
x
|
|
x
|
x
|
x
|
|
|
|
|
|
|
x
|
x
|
x
|
x
|
x
|
|
| ClusterXL (VPN-1 Pro module) |
x
|
x
|
Export HA Legacy Mode
|
|
Export HA Legacy Mode
|
x
|
x
|
|
|
|
|
|
|
x
|
x
|
x
|
State Synchronization Only
|
Supported only in third party mode with VRRP or IP
Clustering
|
|
| UserAuthority (Supported for Management Add-on Only) |
x
|
x
|
x
|
|
x
|
x
|
x
|
|
|
|
|
|
|
x
|
x
|
x
|
x
|
x
|
|
| SmartView Reporter (Server) |
32 bit only
|
|
x
|
|
x
|
x
|
x
|
|
|
|
|
|
|
x
Add-on Only |
x
|
x
Add-on Only |
x
Add-on Only |
x
Add-on Only |
|
| SmartView Monitor |
x
|
x
|
x
|
|
x
|
x
|
x
|
|
|
|
|
|
|
x
|
x
|
x
|
x
|
x
|
|
| VPN-1 Accelerator Driver |
x
|
|
x
|
|
|
x
|
x
|
|
|
|
|
|
|
x
|
|
|
|
|
|
| VPN-1 Accelerator Driver II
|
x
|
|
|
|
|
|
|
|
|
|
|
|
|
x
|
x
|
|
x
|
|
|
| VPN-1 Accelerator Driver III |
Kernel mode inserted after reboot
|
Kernel mode inserted after reboot
|
x
|
|
x
|
x
|
|
|
|
|
|
|
|
x
|
|
x
|
Use Nokia's driver and support
|
x
|
|
| Performance Pack |
x
|
x
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
x
|
|
|
| SmartLSM (GUI) (Supported for Management Add-on Only) |
|
|
x
|
x
|
x
|
x
|
x
|
x
|
|
x
|
x
|
|
|
|
|
|
|
|
|
Notes
OSE Supported Routers
Nortel Versions 7.x, 8.x, 9.x, 10.x, 11x, 12, 13, 14
Cisco IDS Versions 9.x, 10.x, 11x, 12x
Notes to Supported Platforms Table
1) The minimum screen resolution for Check Point’s SmartConsole is
800x600. Lower
resolutions are not supported. Only standard installations of the above
platforms are supported.
2) Both patches and packages are required for Solaris 8 and 9 as
follows:
Required Solaris Packages
• SUNWlibc
• SUNWlibCx
• SUNWter
• SUNWadmc
• SUNWadmfw
Required Solaris Patches
Solaris 8: the following patches (or newer) are required on Solaris 8
UltraSPARC platforms:
patch numbers
108528-17 and 110380-03 and 113652-01
Note - 113652-01 is required only if 108528-17 is installed. For
anything higher than 108528-17, 113652-01 is already included
109147-18
109326-07
32 bit: 108434-01
64 bit: 108435-01
Solaris 9: the following patches (or newer) are required on Solaris 9
UltraSPARC platforms:
patch numbers
112902-07
To verify that you have these patches installed use the command:
showrev -p | grep <patch number>
The patches can be downloaded from: http://sunsolve.sun.com. Install the
32-bit patches before installing 64-bit patches.
3) Installation on Red Hat Linux 7.2 requires kernel version 2.4.9-31
which fixes critical security issues in the Linux kernel. This kernel is
not distributed with Red Hat Linux 7.2 by default. Download from:
http://ftp.redhat.com/pub/redhat/support/enterprise/isv/kernel-archive/7.2/2.4.9-31/
For Red Hat kernel installation instructions, visit:
http://www.redhat.com/support/resources/howto/kernel-upgrade/s1-upgrade.html
4) Installation on Red Hat Linux 7.3 requires kernel version
2.4.18-5. This kernel is not distributed with Red Hat Linux 7.3 by
default. The released version of the 2.4.18-5
kernel contains a remote denial of service vulnerability in the TCP/IP
stack. The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name
CAN-2003-0244 to this issue. Further details are available at:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0244
Check Point recommends installing a 2.4.18-5 kernel that contains a fix
for this vulnerability, this kernel is available for download at the
following locations:
kernel sources:
http://www.checkpoint.com/support/downloads/bin/vpn_des/firewall1/r54/linux/2.4.18-5/kernel-2.4.18-5.ckp.src.zip
i386:
kernel-2.4.18-5.ckp.i386.rpm
http://www.checkpoint.com/support/downloads/bin/vpn_des/firewall1/r54/linux/2.4.18-5/kernel-2.4.18-5.ckp.i386.rpm
i586:
kernel-2.4.18-5.ckp.i586.rpm
http://www.checkpoint.com/support/downloads/bin/vpn_des/firewall1/r54/linux/2.4.18-5/kernel-2.4.18-5.ckp.i586.rpm
kernel-smp-2.4.18-5.ckp.i586.rpm
http://www.checkpoint.com/support/downloads/bin/vpn_des/firewall1/r54/linux/2.4.18-5/kernel-smp-2.4.18-5.ckp.i586.rpm
i686:
kernel-2.4.18-5.ckp.i686.rpm
http://www.checkpoint.com/support/downloads/bin/vpn_des/firewall1/r54/linux/2.4.18-5/kernel-2.4.18-5.ckp.i686.rpm
kernel-smp-2.4.18-5.ckp.i686.rpm
http://www.checkpoint.com/support/downloads/bin/vpn_des/firewall1/r54/linux/2.4.18-5/kernel-smp-2.4.18-5.ckp.i686.rpm
For Red Hat kernel installation instructions, visit:
http://www.redhat.com/support/resources/howto/kernel-upgrade/s1-upgrade.html.
5) The asterisk (*) beside the x in this column indicates that the product is Windows 2000 Professional SP3 compatible.
6) SmartConsole Clients that are not supported on Solaris 8 UltraSPARC (32-bit and 64-bit) include: SmartView Reporter, SmartView Monitor, SmartLSM and the SecureClient Packaging Tool.
7) For the latest Nokia platforms consult the Nokia web site at:http://www.nokia.com or https://support.nokia.com.
8) SmartUpdate supports managing licenses but does not support managing products from a Nokia SmartCenter Server.
9) IP2250 supports SVN Foundation and VPN-1 Pro Module and the SecureClient Policy Server.
10) This version of SecureClient for Mac OS-X (Panther) is based on SecureClient R56 OS: Mac OS-X 10.3.x (Panther)
11) VPN-1 SecuRemote/SecureClient R56 HF-01 is compatible with past versions of the VPN-1 gateway. There is no need to upgrade your gateway to use this version.