VPN-1 UTM vs VPN-1 Power

[mecarter]

We are looking at updating our current VPN-1 license under a promotion Check Point is having this month. I just need to know what the VPN-1 Power license might get me that the VPN-1 UTM doesn't have. I'm already confused enough about the differences between R60 HFA X, R61, R62 and maybe soon R63. I just don't want to leave something useful on the table now and have to re-license later when it will probably cost us more.

Thanks

[chillyjim]

From the pricelist (I'll explain it at the end)

Gateways
VPN-1 UTM gateways provide firewall, VPN, SmartDefense Service, IPS, web application security, and antivirus protection on an all-in-one platform.

VPN-1 Power gateways provide blazing fast security for the most demanding environments providing best-of-breed firewall, VPN, SmartDefense Service IPS, and web application security.

VPN-1 UTM Power gateways are a combination of performance and simplicity- an all-in-one platform that includes the VPN-1 UTM features with the acceleration provided by the VPN-1 Power line. Prices include software only.

[b]SmartCenter Management[b]
SmartCenter UTM includes the basic SmartDashboard and SmartView Tracker and antivirus management.

SmartCenter Power extends SmartCenter for UTM with: SmartView Monitor, SmartUpdate, SmartMap, SmartDirectory, SmartLSM*, Management High Availability and SmartPortal.
* SmartLSM is part of the SmartCenter Power for unlimited sites only.

Translations

UTM includes Antivirus and with R65 content filtering
Power No AV but includes Floodgate and SecureXL (Can improve speed)
PowerUTM is Power+AV

On the SmartCenter side you get a bunch of added features including (IMHO the use ones) Monitor (near time monitoring), SmartPortal (A web interface to view logs, rules, objects, etc) and Management HA (2nd SmartCenter Power license required)

If you are currently an Express license then you go with UTM
If you have a Pro license you go power

Unless you want the added features

As for versions, don't worry about it right now, go with R65 when it comes out. That one is worth the upgrade:

1. Faster
2. Bridge Mode Interfaces/Firewall
3. Content Filtering
4. Aggressive aging of connection under heavy load
5. All the magic VoIP fixes rolled in

[RayPesek]

Does UTM also have the same limitation that Express did on the number of site-to-site VPNs that could be created? Seems to me that Express was limited to three tunnels without additional licensing but Pro was unlimited.

Ray

[chillyjim]

Not that I'm aware of from what we've been told and what I've ready on the website. Was that limit based on the size of the gateway? To be honest, I only sold one express cluster myself.