- Products
- Learn
- Local User Groups
- Partners
- More
What's New in R82.10?
10 December @ 5pm CET / 11am ET
Improve Your Security Posture with
Threat Prevention and Policy Insights
Overlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hello Team
For managing a two-node redundant Spark setup, there are three available approaches:
While using Spark Management via the Infinity Portal is generally recommended, the HA configuration appears to be the most cost-effective option.
My Question:
Which of these methods is considered the optimal management approach overall? Additionally, if we opt for the HA configuration due to its cost benefits, are there any notable disadvantages we should be aware of?
Thank you in advance.
Your first point HA config means locally managed cluster, the other two centrally managed cluster. As every SMB has an included SMP (Spark Management Portal) license, i would opt for 2. as there is no price difference. This is preferable as:
- SMP Logging is superior (logs will vanish after a reboot in local management)
- firmware upgrades, backups and performing scripts on CLI is possible from the portal
Hi @TSOL
My opinon is to create a distributed setup with SMS (maybe on-prem). There are a lot of benefits, but I know this is more expensive but it worth the money.
Akos
Thank you for the advice.
I understand that if the budget allows, it's better to have a separate Smart management server.
I would not support this advice - SMP is a very good solution, and i see no real benefit in On-Prem Management as long as you do not need to use SmartProvisioning for a very large number of SMBs. I have been using and supporting SMBs for 16 years now, so this is out of my own experiences with SMS managing SMBs...
Your first point HA config means locally managed cluster, the other two centrally managed cluster. As every SMB has an included SMP (Spark Management Portal) license, i would opt for 2. as there is no price difference. This is preferable as:
- SMP Logging is superior (logs will vanish after a reboot in local management)
- firmware upgrades, backups and performing scripts on CLI is possible from the portal
Thank you for your advice.
As you mentioned, I confirmed in the datasheet that SPARK includes a one-year SMP license.
Do you know where I can find detailed documentation about this SMP license?
For example, I would like to know the limitations, such as the maximum log storage capacity.
Hi @TSOL ,
Spark Managment (SMP) license is included with all service subscriptions, so as long as the gateway has a valid service (e.g. NGFW), it can be managed via SMP at no additional cost.
Regarding storage of logs, each gateway is entitled to 110Mb ingestion per day and 3 months of retention. This should be enough, but if you need more than this or longer retention, you can purchase an add-on from the catalog. Check out https://support.checkpoint.com/results/sk/sk182394 for more info
Locally managed gateways /clusters are possible in Spark only; It provides a simple and ... cheaper way to manage and monitor the gateways. Plus, there are SMB / SME unique features available when managed locally;
Locally managed gateways can be connected to Spark Management; It makes sense when multiple gateways are deployed
Centrally managed gateways, are more advanced by means of mainly security and networking features; This solution is considered enterprise-grade; Both SPARK and Quantum can be used for that matter
Please contact me directly if more clarification/assistance is needed
Amir
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 4 | |
| 4 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Wed 03 Dec 2025 @ 10:00 AM (COT)
Última Sesión del Año – CheckMates LATAM: ERM & TEM con ExpertosThu 04 Dec 2025 @ 12:30 PM (SGT)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APACThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasWed 03 Dec 2025 @ 10:00 AM (COT)
Última Sesión del Año – CheckMates LATAM: ERM & TEM con ExpertosThu 04 Dec 2025 @ 12:30 PM (SGT)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APACThu 04 Dec 2025 @ 03:00 PM (CET)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEAThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY