Differences between SPLAT and SPLAT Pro?

[GordonCopestake]

Could someone outline the differences between SPLAT and SPLAT Pro? I've seen this page:
Check Point Software: Perimeter Security - SecurePlatform and SecurePlatform Pro Feature Comparison

but the only things listed are the advanced routing features and RADIUS. is this the only difference between SPLAT and SPLAT Pro or are there other "hidden features"?

Am I right in thinking SPLAT is free whilst Pro is a paid upgrade? We are thinking of using Dell 2950's for our new firewall cluster, would people recommend SPLAT (Pro) 2.6 or stick to the usual 2.4?

[chillyjim]

This has been discused before but the differences are:

1. SPLAT is free, SPLATPro costs (US$1500 list)

And includes:

- Dynamic routing (GateD)
- Radius authentication for OS level administrators

** Note SPLATPro is include with the FireFly Integrated Platform at no additional cost **

[mcnallym]

If you want a reliable working system then stick with 2.4. 2.6 is still I believe a work in progress, and whilst it works I would leave a bit before migrating.

[chillyjim]

Originally Posted by mcnallym

If you want a reliable working system then stick with 2.4. 2.6 is still I believe a work in progress, and whilst it works I would leave a bit before migrating.

I agree 100%, unless you need 2.6 for hardware support, stick with standard SPLAT (2.4) for now.

[RayPesek]

** Note SPLATPro is include with the FireFly Integrated Platform at no additional cost **

Hi Chillyjim,

What is that platform? I've never heard of it.

Thanks,

Ray

[cciesec2006]

It is one of those "overpriced" products from Checkpoint running SPLAT
on IBM x-Series Servers.

A checkpoint sale guy and one of his SEs came in trying to sell me this
product thinking I was an idiot and told me that this is a great product
since slice bread. When I told the checkpoint SE dude that why should I
spend that kind of money when I can get the same performance running
on a Dell Servers dual processor quad-core at half the cost, he has NO
answer for me.

By the way, according to the firefly price list, a single quad-card on the
firefly goes for about $1100. How ridiculous can that be?

my 2c.

[cciesec2006]

"- Radius authentication for OS level administrators"

Yes, it can do radius authentication but unfortunately, it can do radius
accounting. How good is that if I can not get radius accounting log?

[rokudan]

Originally Posted by cciesec2006

It is one of those "overpriced" products from Checkpoint running SPLAT
on IBM x-Series Servers.

A checkpoint sale guy and one of his SEs came in trying to sell me this
product thinking I was an idiot and told me that this is a great product
since slice bread. When I told the checkpoint SE dude that why should I
spend that kind of money when I can get the same performance running
on a Dell Servers dual processor quad-core at half the cost, he has NO
answer for me.

By the way, according to the firefly price list, a single quad-card on the
firefly goes for about $1100. How ridiculous can that be?

my 2c.

FWIW, given the budget for it, I would take an IBM server over a crappy Dell server any day... It's just unfortunate however, that budget does not always allow for such...

[chillyjim]

If you just look at the raw cost of a firefly, it is expensive, when you take into account the fact you get three years software subscription, ClusterXL, and SplatPro, the cost is a lot better.

If you look at the price/performance verses a matching Nokia (or Juniper, fortinet for non-CP) and even the M8 is cheap.

It all comes down to is do you want the "appliance" or do you want to roll your own. It's the same with UTM-1.

[cciesec2006]

"FWIW, given the budget for it, I would take an IBM server over a crappy Dell server any day... It's just unfortunate however, that budget does not always allow for such..."

both IBM and Dell run Intel processors so I don't see any superiors of IBM over
Dell or HP for that matters. They are all the same. By purchasing Firefly,
I am paying extra money to CP just for the hardware.

"If you just look at the raw cost of a firefly, it is expensive, when you take into account the fact you get three years software subscription, ClusterXL, and SplatPro, the cost is a lot better."

It did a cost analysis between Firefly and running CP with clusterXL and
SPLATPro on Dell and Sun 4200-M2 series servers, the cost of saving
is almost 45% if I run CP on Sun/Dell hardware versus Firefly.

[rokudan]

Originally Posted by cciesec2006

both IBM and Dell run Intel processors so I don't see any superiors of IBM over Dell or HP for that matters. They are all the same. By purchasing Firefly,
I am paying extra money to CP just for the hardware.

There is a lot more to a piece of hardware, than what processor it is based on.

[cciesec2006]

"There is a lot more to a piece of hardware, than what processor it is based on."

I can tell you this. At my last job, we run the whole Provider-1 NGx R61 with
hfa_01 on Dell Servers. We have 2 P-1 Managers and multiple P-1 containers.
Think about it, Provider-1 is much more important than any firewalls because
if this thing goes down, it will affect many, many firewalls.

IMHO, Dell, IBM, HP, Sun Servers running Intel Processors is pretty much
the same box. I can tell you that I run into bad IBM x-series servers hardware
just as much as Dell or HP servers.

[rokudan]

Originally Posted by cciesec2006

IMHO, Dell, IBM, HP, Sun Servers running Intel Processors is pretty much the same box.

For what it's worth coming from someone you have never met... Trust me as much as you can... After being deeply engrossed in this industry since it's inception, there is a world of difference between all of the above...

[RayPesek]

I prefer IBM myself as well. I used it at my last job, getting rid of Dell and HP as we moved to IBM. When a company prefers one over the other, it generally means the cost of the first one is lower. :-)

There is a lot to be said for getting a three years of support upfront in tight budget times. I find it's easier to push once hard than to have to justify the purchase for the next few years.

I always have a debate with myself over "appliance" versus "build it yourself". If you consider the cost of time in the equation versus plug-it-in-and-go, sometimes the latter is more expensive.

Ray