SmartCenter

[goldberg]

I am running NGX in my lab and this is my first time working with the CheckPoint products. Since I am installing SPLAT, I was wondering what is the rule of thumb with installing SmartCenter. Should it be installed on the same server as VPN-1 or should I install it on a separate server? We have about 200 users and I will also be using HA and have about 5 remote sites connecting via CheckPoint VPN setup in site-to-site connections.

[mmoret]

If you are going to use HA you must use a separate SmartCenter server.
It cannot be combined with ClusterXL enabled.
Also in my point of view, you should want a separate server for security.
You do not want logging, config on a server connected to the internet (a firewall is that most of the time).

You can setup your Smartcenter in your corporate lan (or any other secured network).
The Smartcenter 'client' can be installed on any windows desktop or within Citrix.

Hope this helps!
Martijn

[goldberg]

Thanks Martijn, that is exactly what I wanted to know!
I thought it might be a security risk but being new to CheckPoint, I just wanted to make sure.
Thanks once again!

[Mikroman]

Can you give any hint as to where the Smartcenter Clinet might be? how to go about installing it?

[goldberg]

Mikroman, I'm running NGX and the Install is on CD2. Check the documentation and it will guide you with the install, its pretty straightforward. It even gives info to connect with your gateway.