The requirements of windows for installing checkpoint firewall

[stuart]

Dear all,

Does anybody know the requirements of windows for installing checkpoint firewall, or have any criteria document about this, pls leave me message or reply my topic here.

Best wishes!

[stuart]

what I want is like that what system services on windows should be disabled, and what to be configured such as ip forwarding, and so on.
if anybody know, pls help.

[inetd]

Not sure, but save yourself the headache and put SPLAT on the server you have windows on.

[stuart]

Originally Posted by inetd

Not sure, but save yourself the headache and put SPLAT on the server you have windows on.

Dear inetd,

I think maybe I can follow the standard procedure of windows management guide to harden windows OS, but there must be some documents about how to configure windows such as ip forwarding and so on, that are what I am looking for.
by the way, what does SPLAT mean?

and do you know any other forum or newsgroup for checkpoint ?

[Dzenboy]

splat - is Secure Platform (pro) - the best way vs windows.

[JohnMH]

Unless you have Intel Pro1000 PT quad port adapters and then SPLAT doesn't work with them. Have tried two different versions of driver from CP, both same symptoms High CPU in IRQ column and adapter recognized but will not talk on ethernet interfaces...

So sometimes SPLAT isn't an option..

John

[chillyjim]

Originally Posted by JohnMH

Unless you have Intel Pro1000 PT quad port adapters and then SPLAT doesn't work with them.

They are supported with R65

Have tried two different versions of driver from CP, both same symptoms High CPU in IRQ column and adapter recognized but will not talk on ethernet interfaces...

Did you open a call with TAC? If you did and you're not getting results, call you Check Point SE and let him/her know and ask to have the call escalated. The SPLAT support folks have been pretty good for me.

So sometimes SPLAT isn't an option..

Given a choice of buying different hardware or running a firewall on (Wide open) Windows, SPLAT on different HW is the route I would take everytime.

[JohnMH]

Already have the ticket open, escalated... no answer after the second failed driver from CP.

It may say supported in R65, but I won't believe that until I see traffic passing through the NIC. That is the symptom I have, card looks fine.. ports available... just doesn't pass traffic in both dirrections...

As someone who has used both SPLAT and windows, as long as you know what you are doing windows is fine. SPLAT is really nice, when it works fine (this issue is a major one). Checkpoint lists both the hardware and the NIC as supported... I'm not purchasing from another vendor when I have 30 HPs in production.

John