John, IMHO, the Checkpoint UTM suite of products (URL Filtering/AV/Anti-SPAM) is not mature enough to replace the plethora of appliances you currently have on-site.
For example, the Checkpoint UTM filtering is a basic engine that will allow you to block sites by categories without giving you the detail of granularity a full blown appliance would give you. Furthermore, it is not a tool that is very scalable. As to the Anti-Spam engine, I don't have much experience on them so I can't comment. Another factor to consider is that activating all of these UTM features on a single server/appliance will drain a lot of system resources and considerably reduce the datasheet-stated throughputs of both clear and encrypted traffic. On a final note, also keep in mind that Checkpoint seems to have modified the product SKUs and while a Smart Defence subscription for EDGE devices do seem to include all subscription for UTM features such as AV/URL filtering/Anti-Spam (CPUTM-EDGE-SDTS), there are TWO distinct licences for standard VPN-1 UTM products, one that includes ONLY SmartDefense Services (CPUTM-SMDF) and one that includes everything + UTM subscriptions (CPUTM-SDTS). You should double check with your local Checkpoint SE before pursuing this. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of John Lindblom Sent: November-24-08 2:09 PM To: [email protected] Subject: [FW-1] SmartDefense Subscription Question I'm looking at purchasing the SmartDefense Subscription for an UTM-1 Edge 32 to help protect a remote office network and debating if we should also consider it for the VPN-1 UTM 250 Users at this location also. At this location we have a Baraccuda Networks Web Filter 310 just inside the VPN-1 UTM R65 protecting this network along with the Barracuda Spam Firewall 300 in the DMZ for email. My initial thought is if I already have the Barracuda equipment protecting the network I wouldn't need the SmartDefense Subscription, I do have it enabled on the firewall just not receiving updates. I don't know much about the SmartDefense at this time so I thought I would get some recommendations from the list. John Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
