cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Manager for 2000 gateways

Jump to solution

Hello what would be the recommendation to manage 2000 gateways , also to have smart-event and smart-log with this size of implementation.

0 Kudos
1 Solution

Accepted Solutions
Admin
Admin

Re: Manager for 2000 gateways

Jump to solution

This many gateways in a single management domain probably won't work unless you are using SmartProvisioning.

That assumes the vast majority of these gateways have a nearly identical configuration and that your management isn't on R80+ yet (SmartProvisioning is expected in R80.20).

Even if you have an "unlimited gateways managed" license, a single management domain can't realistically handle a limitless amount of gateways. 

Pushing policy to 2,000 gateways at once without SmartProvisioning will likely fail.

Logging to a single domain/log server at that scale is likely to fail as well.

This means you'll need to split up the management of these gateways across multiple domains, use separate log servers, and separate SmartEvent servers.

Sizing will depend on volume of logs, expected, etc. 

I strongly recommend engaging with your Check Point SE and/or Check Point Professional Services. 

1 Reply
Admin
Admin

Re: Manager for 2000 gateways

Jump to solution

This many gateways in a single management domain probably won't work unless you are using SmartProvisioning.

That assumes the vast majority of these gateways have a nearly identical configuration and that your management isn't on R80+ yet (SmartProvisioning is expected in R80.20).

Even if you have an "unlimited gateways managed" license, a single management domain can't realistically handle a limitless amount of gateways. 

Pushing policy to 2,000 gateways at once without SmartProvisioning will likely fail.

Logging to a single domain/log server at that scale is likely to fail as well.

This means you'll need to split up the management of these gateways across multiple domains, use separate log servers, and separate SmartEvent servers.

Sizing will depend on volume of logs, expected, etc. 

I strongly recommend engaging with your Check Point SE and/or Check Point Professional Services.