Boot from CD

Select Install Gaia on this system

Gaia will now load the storage drivers and inspect the servers hardware.
Select OK to proceed with the installation

Select Great Britain for Keyboard Layout, Select OK

Tab to OK to keep default partition configuration if prompted.

Enter F1r3w*ll and the password then tab to OK

When prompted to select an interface, select Eth0.

Enter the valid IP information for the management interface subnet Select OK
This information will be provided by Dave Cullen before the upgrade.
DO NOT enter the below IP information, this is an example ONLY. MIS
Will provide IP info.

Leave DHCP Un-Checked

Select OK to confirm you are ready to proceed with the install

THE INSTALL WILL NOW PROGRESS

Select Reboot once the installation has complete

Login with admin / F1r3w*ll

Now you will be prompted to HTTPS to the WebUI via the IP specified for Eth0. If
you are unable to connect the WAN link directly, use a crossover cable and set
your laptops IP within the same subnet.
Login with admin / F1r3w*ll once again

Click Next at the First time configuration screen

Leave Continue with Gaia configuration selected and click Next

Leave the Eth0 configuration as default and select Next

Set the Hostname as: DEK-REGION-FW1

Set Primary DNS server to 8.8.4.4 and Secondary DNS Server to 8.8.8.8 (Note
that China should use the ISP DNS servers) Click Next

Set the network time servers to ntp.checkpoint.com and ntp2.checkpoint.com

and leave the Time Zone set to London, Eurpoe (GMT) Click Next

Leave the Security Gateway or Security Management option selected Click

Next

Deselect Security Management Click Next

Leave No selected for the Dynamic IP setting Click Next

Enter the activation key as lemm1ng5 Click Next

Click Finish

Click Yes to start the configuration process

When prompted, click OK to reboot the server

The server will reboot and the Gaia OS will reload

The WebUI will wait for the OS to be reachable

Once ready, the WebUI will return to the login page, enter admin / F1r3w*ll to
login

Select yes if prompted with the below message

Navigate to System Management > Time on the menu. If the time and date is
reporting that it has not yet synchronised with the tie server, select a different
time zone then revert back to London, Europe (GMT). This will force a sync and
the IP of the time server should be shown as below:

Navigate to Network Management > Network Interfaces

Select each interface and configure with the information within the IP Range
spreadsheet.
Comment on each interface with the relevant connection. I.E. WAN, LAN, MPLS,
DMZ etc

If the site has an MPLS line, you will need to add a static route. As below: (The
gateway IP will be the MPLS router IP for that site)

Now initialise SIC with the firewall and push policy from the management server.