topic Re: Optimal Management Method for a Two-Node Redundant Quantum Spark in Spark Firewall (SMB)

Optimal Management Method for a Two-Node Redundant Quantum Spark

TSOL — Tue, 25 Feb 2025 02:49:37 GMT

Hello Team

For managing a two-node redundant Spark setup, there are three available approaches:

HA Configuration
Spark Management via the Infinity Portal
Deploying Smart-1 On-premises on a VM

While using Spark Management via the Infinity Portal is generally recommended, the HA configuration appears to be the most cost-effective option.

My Question:
Which of these methods is considered the optimal management approach overall? Additionally, if we opt for the HA configuration due to its cost benefits, are there any notable disadvantages we should be aware of?

Thank you in advance.

Re: Optimal Management Method for a Two-Node Redundant Quantum Spark

AkosBakos — Tue, 25 Feb 2025 09:21:07 GMT

Hi @TSOL

My opinon is to create a distributed setup with SMS (maybe on-prem). There are a lot of benefits, but I know this is more expensive but it worth the money.

Akos

Re: Optimal Management Method for a Two-Node Redundant Quantum Spark

G_W_Albrecht — Tue, 25 Feb 2025 09:45:37 GMT

Your first point HA config means locally managed cluster, the other two centrally managed cluster. As every SMB has an included SMP (Spark Management Portal) license, i would opt for 2. as there is no price difference. This is preferable as:

- SMP Logging is superior (logs will vanish after a reboot in local management)

- firmware upgrades, backups and performing scripts on CLI is possible from the portal

Re: Optimal Management Method for a Two-Node Redundant Quantum Spark

TSOL — Wed, 26 Feb 2025 02:17:30 GMT

Thank you for the advice.

I understand that if the budget allows, it's better to have a separate Smart management server.

Re: Optimal Management Method for a Two-Node Redundant Quantum Spark

TSOL — Wed, 26 Feb 2025 04:34:45 GMT

Thank you for your advice.

As you mentioned, I confirmed in the datasheet that SPARK includes a one-year SMP license.
Do you know where I can find detailed documentation about this SMP license?

For example, I would like to know the limitations, such as the maximum log storage capacity.

Re: Optimal Management Method for a Two-Node Redundant Quantum Spark

AviG — Wed, 26 Feb 2025 09:13:29 GMT

Hi @TSOL ,

Spark Managment (SMP) license is included with all service subscriptions, so as long as the gateway has a valid service (e.g. NGFW), it can be managed via SMP at no additional cost.

Regarding storage of logs, each gateway is entitled to 110Mb ingestion per day and 3 months of retention. This should be enough, but if you need more than this or longer retention, you can purchase an add-on from the catalog. Check out https://support.checkpoint.com/results/sk/sk182394 for more info

Re: Optimal Management Method for a Two-Node Redundant Quantum Spark

G_W_Albrecht — Wed, 26 Feb 2025 09:43:48 GMT

I would not support this advice - SMP is a very good solution, and i see no real benefit in On-Prem Management as long as you do not need to use SmartProvisioning for a very large number of SMBs. I have been using and supporting SMBs for 16 years now, so this is out of my own experiences with SMS managing SMBs...

Re: Optimal Management Method for a Two-Node Redundant Quantum Spark

Amir_Erman — Wed, 26 Feb 2025 11:15:09 GMT

Locally managed gateways /clusters are possible in Spark only; It provides a simple and ... cheaper way to manage and monitor the gateways. Plus, there are SMB / SME unique features available when managed locally;

Locally managed gateways can be connected to Spark Management; It makes sense when multiple gateways are deployed

Centrally managed gateways, are more advanced by means of mainly security and networking features; This solution is considered enterprise-grade; Both SPARK and Quantum can be used for that matter

Please contact me directly if more clarification/assistance is needed

Amir