Optimal Management Method for a Two-Node Redundant Quantum Spark

[TSOL]

Hello Team

For managing a two-node redundant Spark setup, there are three available approaches:

1. HA Configuration
2. Spark Management via the Infinity Portal
3. Deploying Smart-1 On-premises on a VM

While using Spark Management via the Infinity Portal is generally recommended, the HA configuration appears to be the most cost-effective option.

My Question:
Which of these methods is considered the optimal management approach overall? Additionally, if we opt for the HA configuration due to its cost benefits, are there any notable disadvantages we should be aware of?

Thank you in advance.

[AkosBakos]

Hi @TSOL 

My opinon is to create a distributed setup with SMS (maybe on-prem). There are a lot of benefits, but I know this is more  expensive but it worth the money.

Akos

[TSOL]

Thank you for the advice.

I understand that if the budget allows, it's better to have a separate Smart management server.

[G_W_Albrecht]

I would not support this advice - SMP is a very good solution, and i see no real benefit in On-Prem Management as long as you do not need to use SmartProvisioning for a very large number of SMBs. I have been using and supporting SMBs for 16 years now, so this is out of my own experiences with SMS managing SMBs...

[G_W_Albrecht]

Your first point HA config means locally managed cluster, the other two centrally managed cluster. As every SMB has an included SMP (Spark Management Portal) license, i would opt for 2. as there is no price difference. This is preferable as:

- SMP Logging is superior (logs will vanish after a reboot in local management)

- firmware upgrades, backups and performing scripts on CLI is possible from the portal

[TSOL]

Thank you for your advice.

As you mentioned, I confirmed in the datasheet that SPARK includes a one-year SMP license.
Do you know where I can find detailed documentation about this SMP license?

For example, I would like to know the limitations, such as the maximum log storage capacity.

[AviG]

Hi @TSOL ,

Spark Managment (SMP) license is included with all service subscriptions, so as long as the gateway has a valid service (e.g. NGFW), it can be managed via SMP at no additional cost.

Regarding storage of logs, each gateway is entitled to 110Mb ingestion per day and 3 months of retention. This should be enough, but if you need more than this or longer retention, you can purchase an add-on from the catalog. Check out https://support.checkpoint.com/results/sk/sk182394 for more info

[Amir_Erman]

Locally managed gateways /clusters are possible in Spark only; It provides a simple and ... cheaper way to manage and monitor the gateways. Plus, there are SMB / SME unique features available when managed locally;

Locally managed gateways can be connected to Spark Management; It makes sense when multiple gateways are deployed

Centrally managed gateways, are more advanced by means of mainly security and networking features; This solution is considered enterprise-grade; Both SPARK and Quantum can be used for that matter

Please contact me directly if more clarification/assistance is needed  

Amir