Checkpoint FP3 on Nokia upgrade

[bspreston]

Hi

I have a Nokia IP330 running IPSO 3.6 and FP3 with a Windows XP box as a GUI client.

I would like to upgrade this to NGX, I think at this point IPSO 3.9 and R62 on the existing IP330 with a Windows XP Smartcentre server. (advice on builds would be good)

I have read the Checkpiont docs but to be honest I am still a bit unclear on the following.

I want the FW to be an enforcement module only with the Smartcentre server on the Windows box. I think this is better, correct me if I am wrong. As this does not exist in FP3, only GUI clients, how do I do this? I don't see this in the documentation.

Can I just build a Smartcentre server then upgrade the IPSO and Checkpoint Wrapper then join the Management station back to my new FW?

Any help would be appreciated. I would like to take my old rulebase if possible but its not that big so I don't mind re-creating it.

Thanks Benjamin.

[chillyjim]

Take a look at this document http://www.cpug.org/check_point_reso...Deployment.htm

[bpreston]

ok I read the doc and it seams straight forward. I plan to do the upgrade this saturday I will post back any issues etc.

Many thanks Ben.

[NickBrandson]

Hi Ben,
How's the upgrade, I'm going to upgrade my IP330 too.
But I'm more concerning the performance of running NGX on IP330.
Does it go smoothly after the upgrade?
Thanks
Nick

[mcnallym]

Personally I find NGX on a 330 horrible. As long as you have 256Mb, preferably 512Mb and just running an enforcement point then it is livable with, but as I don't have to work with the box dayin dayout I only have to set them up.

Personally I would just move to IPSO 3.9 and R55, as the 330 is EOS next september. Unless you actually need some NGX specific features then the performance I have found isn't worth it.