Management Integration with VPN-1
Check Point customers can easily extend a VPN-1 or FireWall-1 deployment to include Quality of Service (QoS), without the complexities associated with deploying and managing multiple, dedicated devices. Integration benefits include those provided by a shared
3-tier management architecture and the following management components:
SmartCenter
Check Point SmartCenter combines
QoS, VPN, Firewall and Network Address Translation (NAT)
policy editors into a single integrated application,
eliminating the need for administrators to use multiple
management interfaces. Administrative rights can be
defined such that different people manage QoS and VPN-1/FireWall-1 functionalities.

Sample FloodGate-1 policy
View
Image Detail
Common Network Objects and User Groups
All policies share the same user-defined
network objects and user groups, making it easy to extend
an existing firewall or VPN policy to include QoS.
SmartView Tracker & SmartView Status
FloodGate-1 log entries are integrated
into VPN-1 and FireWall-1 log files to simplify tracking
and responding to network events. In addition, the log
entries are accessible by reporting tools for advanced
reporting and analysis. Check Point's SmartView Status
simplifies the management of multi-function enforcement
points by providing real-time data regarding the health
of FloodGate-1, VPN-1 and FireWall-1 processes. FloodGate-1
information includes status, pending packets and pending
bytes.
SmartView Monitor
Check Point's SmartView
Monitor is included
with FloodGate-1. Performance data is collected at the
gateways and continuously streamed to a central Check
Point SmartCenter. Traffic through a specific gateway
can be monitored by service, network object or QoS rule.
End-to-end performance of site-to-site VPN tunnels can
also easily be monitored.
The screen shot below illustrates
the monitor's suspend/control feature, which allows
the user to toggle FloodGate-1 on and off in real time
to view the impact of a QoS policy.

The SmartView Monitor can
be used to view the impact of a QoS policy. The left
side of the graph shows unmanaged traffic. The right
side shows the impact of implementing a FloodGate-1
QoS policy.