what is secure platform

[sebastan_bach]

hi everyone i am new to chekpoint and this forum.could anyone pls tell me what is checkpoint secure platform actually. is it a proprietory operating system of checkpoint does it require any preloaded OS to install .checkpoint for secure platform and checkpoint for windows the same .kindly someone guide me on this pls. thank you .

sebastan

[Peter]

SecurePlatform is a Linux-based OS pre-configured by CheckPoint. I think it's the best choice for standalone installation and for modules in distributed installation. You can install it in 20 minutes (bootable CD of CheckPoint).
The software for Windows and SecurePlatform seems to be the same (there are some small details in proxy arp etc. whose are differents).

[sebastan_bach]

hi peter thanks for ur instant reply and help.can u tell me how can i get a evaluation copy of the secure platform . so secure platform is basically it has a hardened linux with checkpoint in it right.whereas checkpoint for windows does it have hardened winodws with the cd or we have to install windows and then chcekpoint over it.secure platform is only with linux right or is it with windows also .cause many features of checkpoint run over secure platform than over windows. cause i am a newbie to linux .i have worked a lot on cisco security prodcuts.thank u for ur help .kindly reply in little detail cause i am a newbie in checkpoint.

sebastan

[thefunkygibbon]

checkpoint used to allow you to download the latest secureplatform ISO from thier site. I think now you have to request an eval cd from them (or contact a local reseller)

[Lackie]

Just because you still seem a little confused. SecurePlatform (SPLAT) is the Operating system, it does not have Check Point installed already, you will still have to install that. You don't need a license to use SPLAT, you just need the .iso or the disk to install it. If you have a Check Point disk, SPLAT will also be on there.

[sebastan_bach]

hi lackie thanks for ur instant response. i heard from peter that with secure platform cd u have checkpoint in it. SPLAT is a secure linux platform over checkpoint is installed.it installs a hardened linux and then checkpoint over it. is the SPLAT differnt from checkpoint for windows. kindly reply and thanks for ur help and support.and for the SPLAT do i have to know linux, i am familiar with windows and newbie to linux and checkpoint ,.thank u and waiting for u reply.

sebastan

[chillyjim]

SecurePlatform (AKA SPLAT) is a harden, special built variant of Red Hat Linux designed to run the assorted Check Point products (FireWall-1/VPN-1, Eventia, Connectra, InterSpect, etc).

Depending on the CHKP product, you will get different builds of SPLAT.

SPLAT is the underlying operating system that VPN-1 runs on. Other operating system choices are (as of R60/NGX) are:

Windows (Bad choice IMHO)
Solaris
IPSO (Nokia)
XOS (Crossbeam)

Personally I like SPLAT, the price/performance I can get from say a nice Dell/IBM server for US$4000 is great compared to the other platforms.

[sebastan_bach]

thanks jim . thanks for ur detailed explaination. jim can u tell me one mroe thing . i am buying ngx R60 evaluation copy from checkpoint to learn.will all the features of cehkpoint will work till the evaluation copy expriry date. i only need a computer with a blank hard disk and a bootable cd-rom right.could u tell me pls while installing will it prompt me to install windows or linux . do i have a choice. or it will install linux by default.and as u said secure platform is a hardenend version of linux over which checkpoint is installed.if not secure platform them it will work on a windows server also right . does cehkpoint harden the windows server also . i am new to this kindly explain abt this jim .that will be of great help to me . thank u once again

sebastan

[chillyjim]

The VPN-1 R60 install comes with a "plug-and-play" 15 day eval license that turns on everything AFAIK.

The kit will have two CD's. CD One is a bootable CD that will install SecurePlatform (It wipes the hard drives (yes it will use more than one if available)).

If you insert the CD (I think it's CD 2 for windows) it will auto-run the windows install. Durning the windows install it will do some really basic hardning but it still won't be as good as IPSO or SPLAT.

The GUI that manages VPN-1 is a Windows application that should be installed on a different computer than the firewall itself.

Good luck.

[sebastan_bach]

hi jim . thanks for ur instant reply . thank u very much . i have worked on cisco security products . how different is checkpoint and is it easy than cisco . i have also ordered the evaluation cd;s for R60A for checkpoint express cli and connectra for ssl one. u mean to say in the evaluation copy all the features are enabled and can tested . and after the evaluation perios can we reinstall and use the same copy again . it's onyl for testing purposes for my own studies. thank u for all ur support and help . waiting for ur reply. thank u once again .

sebastan

[chillyjim]

[quote]

Originally Posted by sebastan_bach

hi jim . thanks for ur instant reply . thank u very much . i have worked on cisco security products . how different is checkpoint and is it easy than cisco .

It's very different that Cisco and most people think its a lot easer. The interface is very object based and most people will never need to build rules from the command line.

i have also ordered the evaluation cd;s for R60A for checkpoint express cli and connectra for ssl one. u mean to say in the evaluation copy all the features are enabled and can tested .

Yes. The SmartDefense updates are not included but you can get a 30 day eval. I don't know if you get AV updates for CI.

and after the evaluation perios can we reinstall and use the same copy again . it's onyl for testing purposes for my own studies. thank u for all ur support and help . waiting for ur reply. thank u once again .

sebastan

Yes you can wipe and reinstall. A restore will put the time counter back though.

-jlh

[sebastan_bach]

hi jim thanks once again . hi how are u . and where are u from . here's my yahoo id incase u have on . so we can chat on messenger also. and which firewall products u have worked on . have u worked on cisco pix firewall.
sebastan_bach@yahoo.com
sebastan_bach@hotmail.com

hope u see u online jim .

thanks once again

sebastan

[chillyjim]

I'm in the Albany NY Area. Yes I have worked on PIXen for many years.

As far as other FW's...

IPTabes/IPFilter
Gaunlet
Rapter
Netscreen
Alta Vista
SunScreen

-jlh

[sebastan_bach]

hi jim thanks for ur mail . i haved mailed . waiting for ur reply. thank u once again

sebastan

[Sergej]

Few weeks ago I have a discussion with CheckPoint SE about SPLAT. Here is some comments on SPLAT. I think this is not a secret.
Checkpooint takes source codes of Red Hat Enterprise Linux Advanced Server (2.0 for NG, 3.0 for NGX) and do full source code review (with help of independent consulting company). They throw away all code parts not related to performance/security and compile sources. This is the base for SPLAT (so there is no binary parity with RH). Add Checkpoint software on the top - you get final SPLAT.
If you install anything on the top of SPLAT you will lose official Checkpoint support (most common is cooling fans agents on Compaq/HP servers). The only included drivers to SPLAT is drivers CheckPoint can compile from source codes.
The top requests from customers - support for backup agents (e.g. Veritas) on SPLAT.

[chillyjim]

Add to the list of requested is the APC UPS software (forget what its called).

I never thought about the cooling fan agents. I suppose if the H/W is on the official supported list for SPLAT you could make a good case that these drives can't effect CHKP "support".

-jlh

[intehnet]

splat is the way of the future :)

[Wasted_Potential]

Hi Guys,

Nice forum, plenty of knowledge out there to be shared! Thanks! :-)

My question, why are Checkpoint hiding SPLAT from me? :-P I can't seem to find a way of downloading it, buying it (if I have to), evaluating it (if I can).

Can someone help me and tell me how I can get a hold of this please. It's just to play with really and broaden my skill set so I don't fancy paying too much :-) I already have experience on CP and have an eval copy of NGX to play with.

Many thanks for your time guys and all your previous contributions. I'm sure I'll need some more answers somewhere along the way.

Thanks,

WP

[chillyjim]

SecurePlatform is included on the CD (CD1 in the case of NGX). Just boot off it and it will install.

[Wasted_Potential]

Thanks chillyjim, it says on the CD "operating systems supported" so I didn't think it included it.

Many thanks,

WP