CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


** Announcing the #CPUGchallenge **

I'm very happy to announce that CPUG will be hosting "The CPUG Challenge" during CPX this year.
It promises to be a fun and interesting event that will test (and maybe even expand) your knowledge of Check Point.
Whether or not you plan to attend CPX, we have something for you. Please check out this post or the CPUGchallenge.com web site for more information. -E

 

Results 1 to 5 of 5

Thread: Installing both Gateway and mgmt server on same platform

  1. #1
    Join Date
    2016-09-03
    Posts
    4
    Rep Power
    0

    Default Installing both Gateway and mgmt server on same platform

    Advantages & Disadvantage of installing both Gateway and mgmt server on same platform
    Last edited by gajendra229; 2016-09-03 at 09:07. Reason: Subject is not proper

  2. #2
    Join Date
    2010-11-11
    Posts
    45
    Rep Power
    0

    Default Re: Installing both Gateway and mgmt server on same platform

    Quote Originally Posted by gajendra229 View Post
    Advantages & Disadvantage of installing both Gateway and mgmt server on same platform
    Imho if the need arises to go from a standalone to a distributed environment you wish you would have gone distributed in the first place.
    Then if you have problems with the management you're at the same time have to work on the production firewall.
    Performance issues with smaller deployments come to mind.
    It makes everything more complicated for the costs of a (few) virtual machines.
    I see no advantages in a standalone deployment.

  3. #3
    Join Date
    2006-03-19
    Location
    Northern Ohio
    Posts
    1,363
    Rep Power
    13

    Default Re: Installing both Gateway and mgmt server on same platform

    Absolutely agreed. It takes a lot more horsepower to run both on the same box and performance when installing policies is noticeably slower. You also can run the gateway without a management server so if you have an issue when upgrading the SmartCenter, you're dead when both are on the same box. When the SmartCenter is on a separate box you can upgrade it without worrying if you're going to screw up the firewall itself. It's far less riskier to separate them for a number of reasons.

  4. #4
    Join Date
    2007-06-04
    Posts
    3,186
    Rep Power
    13

    Default Re: Installing both Gateway and mgmt server on same platform

    Quote Originally Posted by Christoph View Post
    Imho if the need arises to go from a standalone to a distributed environment you wish you would have gone distributed in the first place.
    Then if you have problems with the management you're at the same time have to work on the production firewall.
    Performance issues with smaller deployments come to mind.
    It makes everything more complicated for the costs of a (few) virtual machines.
    I see no advantages in a standalone deployment.
    There is 1. Price. When you buy an Appliance then contains the Management and Gateway License. If you deploy the Management Seperately then requires purchase separate Management License.
    If doing a HA System and single Cluster then you can deploy Full Cluster with Management and Gateway on the Check Point Cluster ( assuming buying Appliances ).

    You can alleviate some of the perform hit by making the 1 System Active for the Gateway and 1 System Active for the Mgmt parts.

    However the issues that can have with upgrades being more complicated etc outway that Price advantage IMHO.

    I always recommend Distributed with separate Management Server.

  5. #5
    Join Date
    2016-09-03
    Posts
    4
    Rep Power
    0

    Red face Re: Installing both Gateway and mgmt server on same platform

    Thanks for the answer guys............Appreciate your quick help.

Similar Threads

  1. Replies: 2
    Last Post: 2014-06-18, 08:18
  2. Install Policy without Mgmt server
    By akchakravarthi09 in forum Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))
    Replies: 3
    Last Post: 2013-05-30, 21:17
  3. Issues with Endpoint MGMT Server
    By Jure_CS in forum Miscellaneous
    Replies: 0
    Last Post: 2011-12-02, 04:10
  4. migrated to new Mgmt server but no logging?
    By tdvit in forum Installing And Upgrading
    Replies: 3
    Last Post: 2006-08-18, 07:22
  5. Uninstalling VPN-1 Pro from Mgmt Server
    By rcblu2 in forum Check Point SecurePlatform (SPLAT)
    Replies: 2
    Last Post: 2006-05-05, 13:42

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •