search cancel

Checkpoint firewalls modeling as Linux servers in Spectrum OneClick


Article ID: 215913


Updated On:


CA Spectrum


Some Checkpoint Firewall devices are modeling using the CheckpointFirewall model type and other are modeling using the Host_Device model type.


Release : Any

Component : Spectrum Discovery & Modeling


In order for the device to model as a CheckpointFirewall model, it must support the fwModuleState attribute at oid You can verify if the device supports this attribute by launching MIBTools on the model and querying for this oid.

The device may support some of the Checkpoint attributes but it must support the fwModuleState attribute at oid in order to model as a CheckpointFirewall model.


This is functioning as designed, however some newer Orchestrator devices may not contain oid in which case you can modify the Spectrum Catalog DB to also look for oid  


NOTE When making changes with Model Type Editor the changes need to be made exactly the same on every landscape OR the catalog needs to be saved and reloaded on every landscape.

1. Stop Spectrum Server

2. Launch Model Type Editor from Spectrum Control Panel

3.  Locate the CheckpointFirewall Model Type and edit the VendorOIDVerifyList attribute to include both  and exactly as shown below:

4.  Verify the the Model shows Modified = Yes and select Commit to Database 

5.  Exit Model Type Editor and Start Spectrum Server.




Additional Information

Checking for oid will be added in a future release of Spectrum.