Eventia Analyser in Production environment

[ligmania]

I am evaluating eventia analyzer from checkpoint in a test lab environment, I was wondering if anyone has this product in production? If so, any feedback on how eventia analyzer performs in the real world would be most beneficial? Thanks everyone.

[Sergej]

Looks like Checkpoint have a lot of products other than VPN-1, but no one use those.
I’m' also interested in feedback from the fields. Do someone using Eventia? Do you tired other products before?

[chillyjim]

I am posting with the disclaimer that I do work for Check Point, but I'll not to let that color my reply.

Eventia Analyzer (EVA) as it stands today is a good product for monitoring and alerting on Check Point products. The next version (I don’t remember the scheduled release date, but I think it’s before April) will work with many more products, including Windows 2000/2003 servers.

I haven’t seen a lot of EVA being deployed in production in the north-east US (where I cover) but there is a lot of interest in it and a lot of demo copies out there.

As for me I’ve used it at the reseller I worked for before I came to CHKP and it was working well with the firewalls. I now have it monitoring my lab and home networks, where it’s spending a lot of time adding SAM blocks to my firewall. It has also found some problems on my network (Like my Son’s AV being out-of-date :( ).

So in summary, I think it’s a good product, the developers seem to really like working on it, so you’ll see a lot of improvements. If you’re firewalls are Check Point’s, then I would recommend it.

[chillyjim]

Originally Posted by Sergej

Looks like Checkpoint have a lot of products other than VPN-1, but no one use those.

Yes Check Point is not just a firewall company. As for no one using our other products, I have to disagree. The FW-1/VPN-1 add on products (Reporter, Monitor, Directory) are very popular.

Of the non-add-ons, there are over 90,000 ZoneAlarm and Integrity clients installed. VPN-1 Edge/Safe@Office are deployed by the 1,000s by several large retailers and ISPs.

All that being said, I too am interested in what our users think.

[Sergej]

Originally Posted by chillyjim

Yes Check Point is not just a firewall company. As for no one using our other products, I have to disagree. The FW-1/VPN-1 add on products (Reporter, Monitor, Directory) are very popular.

OK, lets convert my statement to other form. Checkpoint have a broad range of products. FW-1/VPN-1 is easy enough for inexperienced user to install and configure. Other products are administered by real professionals who do not have time to chat in this forum :) That is why we have no feedback on advanced products.
Also more CP products you have and use more solid support and relations with vendor are. It is more cost effective to ask for problem resolution on partners and CP securetrack than in public forum.