VMWare...

Does anyone, or has anyone considered ever running SPLAT or
RHEL in VMWare
ESX Server? Does Checkpoint support this and would there be
any pros/cons to
doing it this way?

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Check Point would not support it and I don't think running
SPLAT on VMWare
is possible

There is a SPLAT VMWare image at
http://w
ww.opsec.com/forms/vmware_sp_ty.html



-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of Novak,
Trevor SCIC
Sent: Saturday, 17 June 2006 6:21 AM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] VMWare...

Does anyone, or has anyone considered ever running SPLAT or
RHEL in VMWare
ESX Server? Does Checkpoint support this and would there be
any pros/cons to
doing it this way?

=================================================
To set vacation, Out-Of-Office, or away messages, send an
email to
LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription
options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Splat in VMware is definitely not supported, and I don't
know of any
intentions of supporting it.  This is my personal opinion,
however, if you
think finger pointing problems are bad now...wait until you
put vmware in
the picture.  I doubt you'd ever get a 'tough' problem
solved.

Oh btw, techs can spot a vmware installation with debugs so
if you ever run
into a problem and send debugs in, they'll tell you to
reinstall the
firewall/manager.

Just my two cents.

Jason

On 6/16/06, Jean-Paul Baillon <JPBaillonnetstarnetworks.com> wrote:
>
> Check Point would not support it and I don't think
running SPLAT on VMWare
> is possible
>
> There is a SPLAT VMWare image at
> http://w
ww.opsec.com/forms/vmware_sp_ty.html
>
>
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of Novak,
> Trevor SCIC
> Sent: Saturday, 17 June 2006 6:21 AM
> To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
> Subject: [FW-1] VMWare...
>
> Does anyone, or has anyone considered ever running
SPLAT or RHEL in VMWare
> ESX Server? Does Checkpoint support this and would
there be any pros/cons
> to
> doing it this way?
>
> =================================================
> To set vacation, Out-Of-Office, or away messages, send
an email to
> LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
subscription options,
> email
> fw-1-ownerts.checkpoint.com
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

> Splat in VMware is definitely not supported, and I
don't know of any
> intentions of supporting it.  This is my personal
opinion, however, if you
> think finger pointing problems are bad now...wait until
you put vmware in
> the picture.  I doubt you'd ever get a 'tough'
problem solved.
>
> Oh btw, techs can spot a vmware installation with
debugs so if you ever run
> into a problem and send debugs in, they'll tell you to
reinstall the
> firewall/manager.
>

 Even those arguments are not relevant, as those who want to
have
a certified CP installation need to follow the supported
platforms in
the release
notes.

You mag get a fw installation running which then is :

  1) Not certified
  2) May contain uninted behavior, such as a sec. policy no
longer doing
what is intended to do, (for instance).

That alone , makes supported  platforms by  CP, the only way
to go.

M.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On Fri, 16 Jun 2006, chkp tech wrote:

> Splat in VMware is definitely not supported, and I
don't know of any
> intentions of supporting it.  This is my personal
opinion, however, if you
> think finger pointing problems are bad now...wait until
you put vmware in
> the picture.  I doubt you'd ever get a 'tough'
problem solved.

OTOH, I would think that SPLAT in VMWare for the
management/Smartcenter 
(as opposed to an enforcement point) would "just
work" - at least, I hope 
it does since I'd like to be able to do that.

I'll probably try it with NGX next week.

-- 
Jameel Akari

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Afternoon all

I have had this working (I use for testing before
deployment) Management and
Enforcement (distributed) on VMWare - never had any issues.

Must stress, just a test environment, not used in any
production at all

Thanks.

On 17/06/06, Jameel Akari <jakaribithose.com> wrote:
>
> On Fri, 16 Jun 2006, chkp tech wrote:
>
> > Splat in VMware is definitely not supported, and I
don't know of any
> > intentions of supporting it.  This is my personal
opinion, however, if
> you
> > think finger pointing problems are bad now...wait
until you put vmware
> in
> > the picture.  I doubt you'd ever get a 'tough'
problem solved.
>
> OTOH, I would think that SPLAT in VMWare for the
management/Smartcenter
> (as opposed to an enforcement point) would "just
work" - at least, I hope
> it does since I'd like to be able to do that.
>
> I'll probably try it with NGX next week.
>
> --
> Jameel Akari
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Jean-Paul Baillon wrote:
> Check Point would not support it and I don't think
running SPLAT on VMWare
> is possible

have you tried running it on vmware and you know for a fact
that it
won't run ?

sin

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Quoting sin <sinIMACANDI.NET>:
> have you tried running it on vmware and you know for a
fact that it
> won't run ?

If you are in doubt why not try it for yourself?






> Jean-Paul Baillon wrote:
> > Check Point would not support it and I don't
think running SPLAT on VMWare
> > is possible
>
> have you tried running it on vmware and you know for a
fact that it
> won't run ?
>
> sin
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Jean-Paul Baillon wrote:
> Quoting sin <sinIMACANDI.NET>:
>> have you tried running it on vmware and you know
for a fact that it
>> won't run ?
> 
> If you are in doubt why not try it for yourself?
> 
> 

I know it works without a glitch. you were the one that said
it won't.

your answer below:

> 
> 
> 
> 
>> Jean-Paul Baillon wrote:
>>> Check Point would not support it and I don't
think running SPLAT on VMWare
>>> is possible

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

VMWare has a Checkpoint Firewall Virtual Appliance. I have
not tried it yet. 
I have seen it
on their site
http://www.vmware.com/vmtn/appliances/directory/
checkpoint.html.
I appologize in advance if I misunderstood this thread or
some else has 
suggested this
site already.

raymond

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================