benefits of upgrading to NGx R65 versus R60, R61 or R62

I have an environments with NG-AI R55 with HFA_20 on both
the P-1 and  SPLAT ClusterXL Active/Active enforcement
modules.

We have an option of upgrading to either NGx R60 with
HFA_05,
NGx R61 with HFA_02 or NGx R65.  We only use the firewalls
as firewalls, NO VPN whatsoever.  We're also looking at
using
some of the smartdefense and web intelligence capabilities
in NGx.
By the way, we will not be using R65 to manage anything
else
other than Firewalls

Since NGx R60 has been released for almost 2.5 years now, I
am
afraid that it will not have much time left for support.  
Furthermore, I was told by one of the Checkpoint SEs that
NGx R60 Architecture is completely than NGx R61 and higher.
In other words, NGx R65 is built upon NGx R61 with HFA_01.
Therefore, there are lot of limitations regarding
SmartDefense
and Web intelligence in NGx R60 as compared to NGx R61/R62
or
R65.  

Can someone who has experience in production environment
with both R60 and R65 tell me what R65 can do in term
of SmartDefense and Web Intelligence that R60 can NOT?  

many thanks.



       
---------------------------------
Fussy? Opinionated? Impossible to please? Perfect.  Join
Yahoo!'s user panel and lay it on us.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

cisco4ng wrote:
  > We have an option of upgrading to either NGx R60 with
HFA_05,
> NGx R61 with HFA_02 or NGx R65.  We only use the
firewalls
> as firewalls, NO VPN whatsoever.  We're also looking at
using
> some of the smartdefense and web intelligence
capabilities in NGx.
> By the way, we will not be using R65 to manage anything
else
> other than Firewalls

Upgrade to the latest version available. I'm doing this for
us and 
customers and never had an issue by putting "bleeding
edge" software in 
prodction.

> Since NGx R60 has been released for almost 2.5 years
now, I am
> afraid that it will not have much time left for
support.  
> Furthermore, I was told by one of the Checkpoint SEs
that
> NGx R60 Architecture is completely than NGx R61 and
higher.
> In other words, NGx R65 is built upon NGx R61 with
HFA_01.
> Therefore, there are lot of limitations regarding
SmartDefense
> and Web intelligence in NGx R60 as compared to NGx
R61/R62 or
> R65.  

I use R65 and I'm quite happy with it. Any time I had a
problem with it, 
it kind of get fixed by disabling SmartDefense settings.

> Can someone who has experience in production
environment
> with both R60 and R65 tell me what R65 can do in term
> of SmartDefense and Web Intelligence that R60 can NOT? 

> 

It works best by disabling as much settings in SmartDefense
and 
WebIntelligence.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================