> IP appliances on the other hand, are a completely different > story, they are great, very robust and the IPSO OS they are > based on, is also very good, rich featured and very easy to > manage. I work for a reseller, so don't really manage firewalls > in a day by day basis, but customers of ours who have acquired > IP appliances, love them and would never change them for > something different.
I do manage them every day, and I agree; the IPSO appliances are more manageable. They are also more complex. Another major advantage of the IP series is the ability to swap and add interface cards, which you can't do on UTM appliances. But an IP series box will cost you twice as much as a UTM series appliance with a similar performance point. This has led my local government employer to choose UTM appliances in our current hardware replacement cycle. But this worries me: > Note also that the marketing performance numbers on UTM appliances > are way too high for devices below the 3000 series UTM's. Dan Lynch, CISSP Information Technology Analyst County of Placer Auburn, CA > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:fw-1-mailingl...@amadeus.us.checkpoint.com] On Behalf > Of Sergio Alvarez > Sent: Wednesday, October 20, 2010 4:22 PM > To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM > Subject: Re: [FW-1] Staying with SecurePlatform? > > I consider all previous comments valid, but it is important > to note Check > Point customers in general have complained about poor hardware and > performance on the UTM-1 appliances, which by the way are SPLAT based. > > IP appliances on the other hand, are a completely different > story, they are > great, very robust and the IPSO OS they are based on, is also > very good, > rich featured and very easy to manage. I work for a reseller, so don't > really manage firewalls in a day by day basis, but customers > of ours who > have acquired IP appliances, love them and would never change them for > something different. > > Regards > > > On Wed, Oct 20, 2010 at 2:39 PM, Kropiewnicki, Alex < > alexkropiewni...@ozinga.com> wrote: > > > Main reason for me is that I don't like to replace my > appliance every 3 > > years. The firewall is a very light user of resources > (less heat) on the > > SPLAT which I believe leads to a much longer life on the > hardware. Having > > spare hardware on site makes all the difference in the world. > > > > -----Original Message----- > > From: Mailing list for discussion of Firewall-1 [mailto: > > fw-1-mailingl...@amadeus.us.checkpoint.com] On Behalf Of > Ebersole, Jason > > Sent: Wednesday, October 20, 2010 2:34 PM > > To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM > > Subject: [FW-1] Staying with SecurePlatform? > > > > I'm at a crossroads. My maintenance renewal is coming due > and my Checkpoint > > representative was reviewing the account (we have one VPN-1 > standalone > > Enterprise license protecting 250 IPs) and suggested I go > with an appliance. > > I think the IP565. There would be a pretty significant > discount to get the > > appliance, but the big thing that's got me thinking about > this is that my > > yearly renewal fees would be reduced by over half. > > > > However, I like the convenience of running Checkpoint on my > own hardware. I > > can reduce downtime by having a spare box preconfigured in > case of hardware, > > configuration change or upgrade issues. I think this is > pretty huge, but > > I've been doing this for so long, and never really had any major > > configuration or upgrade issues, that I wonder if my > reasoning is flawed. > > > > For those running SecurePlatform, what are your reasons for > not going with > > an appliance? > > > > Thanks, Jason > > > > > > > > > > > > Scanned by Check Point Total Security Gateway. > > > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to lists...@amadeus.us.checkpoint.com > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > fw-1-ow...@ts.checkpoint.com > > ================================================= > > > > Scanned by Check Point Total Security Gateway. > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to lists...@amadeus.us.checkpoint.com > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > fw-1-ow...@ts.checkpoint.com > > ================================================= > > > > > > -- > Sergio Alvarez > CISSP | CCSE+ > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to lists...@amadeus.us.checkpoint.com > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > fw-1-ow...@ts.checkpoint.com > ================================================= > Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway.
