[czech12]

First, I wouldn't install it on a machine running Windows XP Pro (I'm not even sure if you can install it on XP Pro). For the type of installation you are describing, I believe SecurePlatform would be your best option. SecurePlatform is free and it is pre hardened, so you don't have to worry about locking down the box. You could use Windows 2K3 Server for the Management Module if you want to do a distributed installation, but I wouldn't install the Enforcement Module on a Windows platform. Windows isn't really known for routing traffic.

You are losing me with the DHCP thing. I originally thought you wanted the NetGear to be able to RECEIVE a DHCP address, and Youngy and myself suggested that you just use the CP Firewall to RECEIVE the DHCP address and take the NetGear out of the picture. In your last post though, you said DHCP server. Do you want the NetGear or the Firewall to GIVE OUT DHCP addresses? If that's the case, the NetGear wouldn't be able to do that anyway because it will sit in front of your firewall, not behind it where your DHCP clients would sit. SecurePlatform does have the ability to hand out DHCP addresses though, so that would be an option if that is what you are talking about.

If you are serious about security, somebody made the right choice in choosing Check Point. The firewall that comes with Windows is a joke, unless you are talking about an ISA Proxy server. Check Point is still much better than ISA too, though. Check Point is the leader in Firewall Technology.

If you aren't sure how to best design this implementation or how it is all going to work, I would talk to your Check Point VAR (The ones you purchased the license from). They should be able to sit down with you and talk design and implementation. That is what the "Value Add" of a "VAR" is...