I'd definately recommend to use Provider-1 if you're talking about 30 plus
firewalls. Technically and license-wise, it's possible to manage from
regular management server. But it's going to be an administrative nightmare
which is always a bad practice when it comes to security. You want to keep
it simple. Provider-1 is very efficient in managing large number of
firewalls which better be categorized for management purposes. My 2 cents.
Regards,
Sun Yu, CISSP
Lucent Worldwide Services
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On
> Behalf Of
> Greg Winkler
> Sent: Friday, April 20, 2001 2:27 PM
> To: [EMAIL PROTECTED]
> Subject: [FW1] Managing a lot of firewalls
>
>
>
> A suggestion has been made that we move to an Internet access
> model that
> involves firewalls and ISP connection points at many of our locations,
> mostly in Europe. Can't give you an exact number but I would
> guess we are
> talking about 30 or so firewalls.
>
> How would one manage so many? Right now we've got only 4 and
> management is
> fairly simple using and Enterprise license. Can a single
> management station
> manage 30 plus firewalls. I would expect probably not. What are the
> options? I've heard of Provider-1, would that allow me to
> "manage" multiple
> management stations such that I would still only have one set
> of network
> objects and rulebase to maintain? Does it work well?
>
>
> --------------------------------------------------------------
> --------------------------
>
> Greg Winkler
> Systems Manager, IT&S
> Huntsman Corporation
> Internet Mail: [EMAIL PROTECTED]
> Voice: (713) 235-6018
> Fax: (713) 235-6890
>
>
>
>
> ==============================================================
> ==================
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
