RE: [FW1] Managing a lot of firewalls

["Byoung Sun Yu" <byu2@FW1-NOSPAMlucent.com>]

I'd definately recommend to use Provider-1 if you're talking about 30 plus
firewalls. Technically and license-wise, it's possible to manage from
regular management server. But it's going to be an administrative nightmare
which is always a bad practice when it comes to security. You want to keep
it simple. Provider-1 is very efficient in managing large number of
firewalls which better be categorized for management purposes. My 2 cents.

Regards,

Sun Yu, CISSP
Lucent Worldwide Services


> -----Original Message-----
> From: owner-fw-1-mailinglist@beethoven.us.checkpoint.com
> [mailto:owner-fw-1-mailinglist@beethoven.us.checkpoint.com]On
> Behalf Of
> Greg Winkler
> Sent: Friday, April 20, 2001 2:27 PM
> To: fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: [FW1] Managing a lot of firewalls
>
>
>
> A suggestion has been made that we move to an Internet access
> model that
> involves firewalls and ISP connection points at many of our locations,
> mostly in Europe. Can't give you an exact number but I would
> guess we are
> talking about 30 or so firewalls.
>
> How would one manage so many? Right now we've got only 4 and
> management is
> fairly simple using and Enterprise license. Can a single
> management station
> manage 30 plus firewalls. I would expect probably not. What are the
> options? I've heard of Provider-1, would that allow me to
> "manage" multiple
> management stations such that I would still only have one set
> of network
> objects and rulebase to maintain? Does it work well?
>
>
> --------------------------------------------------------------
> --------------------------
>
> Greg Winkler
> Systems Manager, IT&S
> Huntsman Corporation
> Internet Mail: greg_winkler@huntsman.com
> Voice:> Fax:>
>
>
>
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================