Security Group Concepts
Check Point Maestro R80.20SP Administration Guide | 44
Security Group Concepts
This section describes some of the Security Group concepts.
Single Management Object and Policies
In This Section:
Installing and Uninstalling Policies
Working with Policies (asg policy)
Single Management Object
Single Management Object (SMO) is a Check Point technology that manages the Security Group as one
large Security Gateway with one management IP address. All management tasks are handled by one
Security Appliance (the SMO Master), which updates all other Security Appliances. All management tasks,
such as Security Gateway configuration, policy installation, remote connections and logging are handled
by the SMO master. The Active Security Appliance with the lowest ID number is automatically assigned to
be the SMO.
Use this command to identify the SMO and see how tasks are distributed on the Security Appliances:
> asg stat -i tasks
--------------------------------------------------------------------------------
| Task (Task ID)
|
Chassis 1
|
--------------------------------------------------------------------------------
| SMO (0)
|
1(local)
|
| General (1)
|
1(local)
|
| LACP (2)
|
1(local)
|
| CH Monitor (3)
|
1(local)
|
| DR Manager (4)
|
1(local)
|
| UIPC (5)
|
1(local)
|
| Alert (6)
|
1(local)
|
--------------------------------------------------------------------------------
