Ivan,
You will need a separate Check Point license for each node in the cluster,
licensed to the dedicated IPs for each interface, not to the cluster IP. You
license FullCluster to the control IP addresses (those assigned to the
interfaces that will implement the heartbeat and GUI/command-line command
functions). If you have further questions or concerns, feel free to contact
Stonesoft's support at [EMAIL PROTECTED]
As for Check Point and alternatives, there are certainly alternatives out there.
You could implement a basic Linux box with ipchains, for example. Of course,
the costs of learning to administer Linux to obtain the proficiency to run
ipchains as a production firewall, plus the lack of VPN/SecuRemote and other
support (CVP, for example) probably doesn't make Check Point any more expensive.
There are some problems with their support, and they are somewhat expensive, but
I think Check Point is still probably one of the best on the market. You might
want to check on Guantlet or Raptor as well, which also get good reviews in the
trade journals, and for which there is also a StoneBeat FullCluster product. :)
----------------------------------------------------------------
Mark Boltz Stonesoft, Inc.
Network Security Specialist 115 Perimeter Center Place
[EMAIL PROTECTED] South Terraces, Suite 1000
Tel: +1 770 668 1125 Atlanta, GA 30346
Cel: +1 404 386 8500 USA
Fax: +1 770 668 1131 http://www.stonesoft.com
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
