I agree with this post and the following post from Bruce Warrington. I would like to add that IPSO however robust adds another pain/failure point. I am sure the product has matured, don't they all, but we started checkpoint with IPSO and I can tell you it took more time and effort to maintain IPSO vs SPLAT. When stuff breaks, you don't want the IPSO team pointing the finger at the Firewall team (internal checkpoint). We had issues when we were on IPSO that we never encountered when we moved to SPLAT. When you compare IPSO to SPLAT the simplified architecture of SPLAT is a winner!
I am sure you can argue for an appliance, but arguing is easy it's the agreeing part that is hard :) -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:fw-1-mailingl...@amadeus.us.checkpoint.com] On Behalf Of Sergio Alvarez Sent: Wednesday, October 20, 2010 6:22 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] Staying with SecurePlatform? I consider all previous comments valid, but it is important to note Check Point customers in general have complained about poor hardware and performance on the UTM-1 appliances, which by the way are SPLAT based. IP appliances on the other hand, are a completely different story, they are great, very robust and the IPSO OS they are based on, is also very good, rich featured and very easy to manage. I work for a reseller, so don't really manage firewalls in a day by day basis, but customers of ours who have acquired IP appliances, love them and would never change them for something different. Regards On Wed, Oct 20, 2010 at 2:39 PM, Kropiewnicki, Alex < alexkropiewni...@ozinga.com> wrote: > Main reason for me is that I don't like to replace my appliance every 3 > years. The firewall is a very light user of resources (less heat) on the > SPLAT which I believe leads to a much longer life on the hardware. Having > spare hardware on site makes all the difference in the world. > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 [mailto: > fw-1-mailingl...@amadeus.us.checkpoint.com] On Behalf Of Ebersole, Jason > Sent: Wednesday, October 20, 2010 2:34 PM > To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM > Subject: [FW-1] Staying with SecurePlatform? > > I'm at a crossroads. My maintenance renewal is coming due and my Checkpoint > representative was reviewing the account (we have one VPN-1 standalone > Enterprise license protecting 250 IPs) and suggested I go with an appliance. > I think the IP565. There would be a pretty significant discount to get the > appliance, but the big thing that's got me thinking about this is that my > yearly renewal fees would be reduced by over half. > > However, I like the convenience of running Checkpoint on my own hardware. I > can reduce downtime by having a spare box preconfigured in case of hardware, > configuration change or upgrade issues. I think this is pretty huge, but > I've been doing this for so long, and never really had any major > configuration or upgrade issues, that I wonder if my reasoning is flawed. > > For those running SecurePlatform, what are your reasons for not going with > an appliance? > > Thanks, Jason > > > > > > Scanned by Check Point Total Security Gateway. > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to lists...@amadeus.us.checkpoint.com > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > fw-1-ow...@ts.checkpoint.com > ================================================= > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to lists...@amadeus.us.checkpoint.com > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > fw-1-ow...@ts.checkpoint.com > ================================================= > -- Sergio Alvarez CISSP | CCSE+ ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com =================================================
