Management Station Splat/Windows

[AndyB]

I would be grateful for any thoughts regarding running a NG AI management station on a SPLAT box. We currently use a W2K platform and will be replacing the server in the near future. Was planning to use Windows 2003 server platform but now thinking of installing SPLAT instead as it does seem to be a more secure option. Not having much experience with SPLAT (Windows/IPSO) I would like to get an idea on the Pro's/Con's of using SPLAT to manage my firewalls.

regards

[Peter]

I prefer Windows for SmartServer and SPLAT for modules.

My pro's for Windows:

- you don't need a dedicated server
- you can use centralized backup (usially under Windows)
- you can use any monitoring software for Windows
- you can use any hardware supported by Windows (for example, Dell 1425SC with Adaptec 39320 SCSI does not work under SPLAT but works good under Windows 2003)
- you can use software RAID under Windows

I see really one contra - security. Sure, by default a SmartServer under SPLAT will be more secure that under Windows. But you CAN secure your Windows 2003 Server if you really want it.

[Lackie]

Plus if your managment station is protected by the firewall that it's enforcing you can protect it that way too.

[chillyjim]

Management on SPLAT

1. Lower memory requirements.
2. It REALLY should be on a dedicated server
3. Lower disk requirements
4. It's faster
5. It's supported by CHKP.
6. No need to pay for a Win2k3 license

As for the security part, you should run a Firewall Security Server on the SmartCenter as well as protecting it with the firewall.

If the SmartCenter is compromised, you're firewall is as well.

[mdsenv]

You'll get better performance on the same hardware with SPLAT.

If you have 10 or more firewalls logging back to the SmartCenter you may want to consider SPLAT. Otherwise Windows 2003 is fine for smaller WANs.