[mcnallym]

Any old Windows Patch Management Software would do.

If you are going to run your Check Point on Windows (and I wouldn't personally) then there are lots of existing Windows Patch Management products available ranging from Microsoft WSUS right the way upto Microsoft System Center.

I can't imagine a Microsoft environment not having some form of existing Windows Patch management, especially as WSUS is free.

I take it that as you have exported the cp config from one to the other that the 2nd box is an offline backup ready to go if the live firewall breaks.

Also if you MUST keep your check point on Windows at least move the DNS Server off the box. Your firewall really should be a single purpose box.

Is there a reason, other then the DNS Server running on the box that you don't use Secure Platform as you really don't have to be a linux expert to use it.