1) make sure the P-1 box has plenty of memory.  P-1 is always
memory hungry.  It's never enough.  The more memory, the better.
It will come in handy when it comes time for CMA migration.

2) Make sure the P-1 box is at least a quad-processor box.  P-1
is not CPU intensive but things will go horribly wrong when it comes
time for CMA migration.  I learned that earlier this week.

3) Make sure you have a lot of disk space for logs.  Disk space
is very cheap these days.

4) make sure you come up with a good scheme to rotate the log
files and compress them up to save disk space on your log server.
A 1GB log file size can be compressed down to 80MB with 
bzip -9 option.

Other than that, P-1 is not that difficult to learn and manage.

my 2c

Din Cox <[EMAIL PROTECTED]> wrote: It depends on the size of the environment. 
If you need the logs for
tracking and troubleshooting purposes, where various services and
activities are being tracked, it is recommended that you have one or
more dedicated log servers (MLM).

 

Din Cox

Security Engineer

Mission Critical Systems

Comprehensive Systems and Network Security

Phone:(954) 788-7110

Fax:(954) 788-7112

[EMAIL PROTECTED]

www.locked.com

 


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================


       
---------------------------------
Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, 
photos & more. 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to