Re: [FW1] Managing a lot of firewalls

["Aylton Souza, CISSP" <ayltonsz@FW1-NOSPAMwebsecret.com.br>]

Guys,

I have been through this before and my suggestion is: Don't do that unless
you have a full unlimited license for aspirins and coffee. :)

Best wishes

Aylton
----- Original Message -----
From: "Greg Winkler" <Greg_Winkler@huntsman.com>
To: "Jason Stout" <jasonstout@email.com>
Cc: <fw-1-mailinglist@beethoven.us.checkpoint.com>;
<owner-fw-1-mailinglist@beethoven.us.checkpoint.com>
Sent: Tuesday, April 24, 2001 12:29 PM
Subject: RE: [FW1] Managing a lot of firewalls


>
>
> Jason,
>
> Could you elaborate on the suggestion to replicate the objects.c file
> around? If I get the gist of what you suggest I would have one objects.c
> file with all my network objects defined in it and have to manually move
it
> between several management stations? I would assume that I'd have to do
the
> same with my rulebase as well. Scares the hell out of me!
>
> --------------------------------------------------------------------------
--------------
>
> Greg Winkler
> Systems Manager, IT&S
> Huntsman Corporation
> Internet Mail: greg_winkler@huntsman.com
> Voice:> Fax:>
>
>
>
>                     Jason Stout <jasonstout@email.com>
>                     Sent by:                                        To:
Greg Winkler/US/HO/HUNTSMAN@HUNTSMAN
>                     owner-fw-1-mailinglist@beethoven.us.chec        cc:
fw-1-mailinglist@beethoven.us.checkpoint.com
>                     kpoint.com
Subject:     RE: [FW1] Managing a lot of firewalls
>
>
>                     04/21/2001 02:12 AM
>
>
>
>
>
>
> With Provider each management client will have thier own objects.
> Your essentially giving each customer or access point in your
> case, thier own management stations. I don't think this would be
> a good solution for what your looking to do.
>
> I'd suggest running all your firewalls on a couple of management
> servers and replicate the objects.c to the other management
> servers.
>
> -jason
>
> ------Original Message------
> From: "Greg Winkler" <Greg_Winkler@huntsman.com>
> To: fw-1-mailinglist@beethoven.us.checkpoint.com
> Sent: April 20, 2001 7:27:20 PM GMT
> Subject: [FW1] Managing a lot of firewalls
>
>
>
> A suggestion has been made that we move to an Internet access model that
> involves firewalls and ISP connection points at many of our locations,
> mostly in Europe. Can't give you an exact number but I would guess we are
> talking about 30 or so firewalls.
>
> How would one manage so many? Right now we've got only 4 and management is
> fairly simple using and Enterprise license. Can a single management
station
> manage 30 plus firewalls. I would expect probably not. What are the
> options? I've heard of Provider-1, would that allow me to "manage"
multiple
> management stations such that I would still only have one set of network
> objects and rulebase to maintain? Does it work well?
>
>
> --------------------------------------------------------------------------
--------------
>
>
> Greg Winkler
> Systems Manager, IT&S
> Huntsman Corporation
> Internet Mail: greg_winkler@huntsman.com
> Voice:> Fax:>
>
>
>
>
============================================================================
====
>
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>
>
> -----------------------------------------------
> FREE! The World's Best Email Address @email.com
> Reserve your name now at http://www.email.com
>
>
>
>
>
============================================================================
====
>
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>
>
>
>
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================