<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Check Point&#8217;s Latest Innovation: A Licensing Scheme</title>
	<atom:link href="http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/</link>
	<description>The Palo Alto Networks Research Center Blog</description>
	<lastBuildDate>Fri, 05 Mar 2010 22:01:02 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Anoop</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-300</link>
		<dc:creator>Anoop</dc:creator>
		<pubDate>Fri, 17 Apr 2009 21:04:38 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-300</guid>
		<description>This is embarrassing..!! I went through CP website talking about their blade architecture after reading this blog...Sorry to say, but its so embarrassing and disappointing..!! I would not have cared if they claim &quot;A Revolution in our product series&quot; because they never probably had these feature flexibility in their product...But its absolutly WRONG to claim &quot;A Revolution in IT Security&quot; when there is not even a single stuff which is new a contribution to the security industry...

They don&#039;t even have a hardware flexibility as they again wrongly claim...Look at their SG103 and SG203 series...Does that mean since the lower their models does not have enough resources to host all the blade features, an SMB customer who doesn&#039;t have big chunk of dollors to shell out should live with critical protection....Guys...look around and see how the competitors work...Couple of the so called UTM leaders delivers everything ..every single feature they release on their smallest box possible..SO what hardware flexibility are we talking here...??

Now look at their list of Security Gateway Software blades...Tell me one feature which has not be there with them or their competitors...I would still bid on the Security Management Software blades...I would be a honest person to call them as &#039;Product Enhancements&#039;..!!

With the acquisition of Nokia Appliances Business, they probably wanna sell more appliances looking at the lucrative revenue it can bring..!!Nothing wrong with it...But I am skeptical about &quot;Guaranteed performance – Enables provisioning of resources that guarantee service levels&quot; when it comes to open and VMWare platform though you can allocate resources.

The cut it short...Its nothing but the same glorified UTM stuff..with the more granular control and management which is there already with few of the reputed product in terms of granular role based models.

From a partner precective is lesser the number of part numbers in BoQ, it makes much easier....regardless of the deal size..I would attribute that aspect as one of the key reasons for the success of the leading UTM vendor...!!

Lastly, the era of hiring expensive CP certified specialist gone...!! Companies would invest that amount to get one Firewall knowledgeable Security Admin and IS Auditor for that cost.. :) Benefit is double fold guys...!! And that attributes why one of the world biggest Routing/Switching companies UTM enhancement of the older legacy product still didn&#039;t pick up the way expect...Its a nightmare to manage...so is CP..

Cheers...!!</description>
		<content:encoded><![CDATA[<p>This is embarrassing..!! I went through CP website talking about their blade architecture after reading this blog&#8230;Sorry to say, but its so embarrassing and disappointing..!! I would not have cared if they claim &#8220;A Revolution in our product series&#8221; because they never probably had these feature flexibility in their product&#8230;But its absolutly WRONG to claim &#8220;A Revolution in IT Security&#8221; when there is not even a single stuff which is new a contribution to the security industry&#8230;</p>
<p>They don&#8217;t even have a hardware flexibility as they again wrongly claim&#8230;Look at their SG103 and SG203 series&#8230;Does that mean since the lower their models does not have enough resources to host all the blade features, an SMB customer who doesn&#8217;t have big chunk of dollors to shell out should live with critical protection&#8230;.Guys&#8230;look around and see how the competitors work&#8230;Couple of the so called UTM leaders delivers everything ..every single feature they release on their smallest box possible..SO what hardware flexibility are we talking here&#8230;??</p>
<p>Now look at their list of Security Gateway Software blades&#8230;Tell me one feature which has not be there with them or their competitors&#8230;I would still bid on the Security Management Software blades&#8230;I would be a honest person to call them as &#8216;Product Enhancements&#8217;..!!</p>
<p>With the acquisition of Nokia Appliances Business, they probably wanna sell more appliances looking at the lucrative revenue it can bring..!!Nothing wrong with it&#8230;But I am skeptical about &#8220;Guaranteed performance – Enables provisioning of resources that guarantee service levels&#8221; when it comes to open and VMWare platform though you can allocate resources.</p>
<p>The cut it short&#8230;Its nothing but the same glorified UTM stuff..with the more granular control and management which is there already with few of the reputed product in terms of granular role based models.</p>
<p>From a partner precective is lesser the number of part numbers in BoQ, it makes much easier&#8230;.regardless of the deal size..I would attribute that aspect as one of the key reasons for the success of the leading UTM vendor&#8230;!!</p>
<p>Lastly, the era of hiring expensive CP certified specialist gone&#8230;!! Companies would invest that amount to get one Firewall knowledgeable Security Admin and IS Auditor for that cost.. <img src='http://www.paloaltonetworks.com/researchcenter/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  Benefit is double fold guys&#8230;!! And that attributes why one of the world biggest Routing/Switching companies UTM enhancement of the older legacy product still didn&#8217;t pick up the way expect&#8230;Its a nightmare to manage&#8230;so is CP..</p>
<p>Cheers&#8230;!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Yoyo</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-299</link>
		<dc:creator>Yoyo</dc:creator>
		<pubDate>Thu, 16 Apr 2009 14:32:35 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-299</guid>
		<description>Ok, someone just mailed me a video feed highlighting Check Point&#039;s &quot;innovation&quot;, all with sound effects:

http://media.checkpoint.com/flash/software-blades-demo/index.html

For anyone that was really curious about the blade architecture...</description>
		<content:encoded><![CDATA[<p>Ok, someone just mailed me a video feed highlighting Check Point&#8217;s &#8220;innovation&#8221;, all with sound effects:</p>
<p><a href="http://media.checkpoint.com/flash/software-blades-demo/index.html" rel="nofollow">http://media.checkpoint.com/flash/software-blades-demo/index.html</a></p>
<p>For anyone that was really curious about the blade architecture&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nir Zuk</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-298</link>
		<dc:creator>Nir Zuk</dc:creator>
		<pubDate>Wed, 08 Apr 2009 21:01:24 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-298</guid>
		<description>Read your own reply again, several times and very slowly, and you will see that even you describe Check Point&#039;s new &quot;innovation&quot; as a licensing scheme. What does it mean to move a software blade from one appliance to another? What is it that you actually move? You move a license key. Man - wake up and face the truth. You are working for a company focused on milking its customer base and not on innovation. The last time Check Point released a new security feature was 2002 when Smart Defense was &quot;released&quot; (it was mostly renaming the existing &quot;security servers&quot;). The last time Check Point released a security feature than anyone actually uses was 1997. Your customers and resellers are already awake. It&#039;s time for you to wake up too. It&#039;s time to fix the firewall...</description>
		<content:encoded><![CDATA[<p>Read your own reply again, several times and very slowly, and you will see that even you describe Check Point&#8217;s new &#8220;innovation&#8221; as a licensing scheme. What does it mean to move a software blade from one appliance to another? What is it that you actually move? You move a license key. Man &#8211; wake up and face the truth. You are working for a company focused on milking its customer base and not on innovation. The last time Check Point released a new security feature was 2002 when Smart Defense was &#8220;released&#8221; (it was mostly renaming the existing &#8220;security servers&#8221;). The last time Check Point released a security feature than anyone actually uses was 1997. Your customers and resellers are already awake. It&#8217;s time for you to wake up too. It&#8217;s time to fix the firewall&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Yoyo</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-289</link>
		<dc:creator>Yoyo</dc:creator>
		<pubDate>Sat, 04 Apr 2009 16:18:41 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-289</guid>
		<description>Nir - 100% on the ball...
We&#039;re a CP partner, so I could not express my thoughts as openly, but at CPX when they unveiled the &quot;software blades&quot;, everyone basically reacted the same way.

CP does not win new business anyway, they consistently lose POC&#039;s to other players, more than 50% of revenues are subscription and support, the rest is current customer expansion and end-point, almost no new customers.

It is really sad, because CP could have been so much more successful, with all the talent it had, and the great market position at the end of the millennium.</description>
		<content:encoded><![CDATA[<p>Nir &#8211; 100% on the ball&#8230;<br />
We&#8217;re a CP partner, so I could not express my thoughts as openly, but at CPX when they unveiled the &#8220;software blades&#8221;, everyone basically reacted the same way.</p>
<p>CP does not win new business anyway, they consistently lose POC&#8217;s to other players, more than 50% of revenues are subscription and support, the rest is current customer expansion and end-point, almost no new customers.</p>
<p>It is really sad, because CP could have been so much more successful, with all the talent it had, and the great market position at the end of the millennium.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Brendan McGann</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-295</link>
		<dc:creator>Brendan McGann</dc:creator>
		<pubDate>Fri, 03 Apr 2009 00:55:14 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-295</guid>
		<description>Nir,

I would expect that a person of your intellect would not base his judgement solely on a press release.  It seems that you have formed an opinion based on minimal information, and bitterness towards your former employer.

Israeli Companies, and Check Point in particular, guard their information and product roadmaps very carefully.  You should know this as well as anyone.

I am a current Check Point employee, and having taken the time to truly understand
the Software Blade architecture, I believe that it is revolutionary in the flexibility it provides our customer.  If you were to look at the pricing associated with this architecture, it is quite easy to see that under this architecture, this will actually lower the cost to our customers.

Once the true nature of the Software Blade Architecture and other upcoming announcements have been made, I am confident that the security Industry will understand the true nature of Check Points direction.  Innovation is still the primary focus at Check Point, and if you actually took the time to read more than a press release, you could actually provide an informed Opinion.

The screenshot that one poster points to as having the &quot;Firewall&quot; grayed out, is nothing more than a screenshot of a single appliance, which includes the firewall blade. This is not a requirement when purchasing an appliance, and appliances can absolutely be purchased with only the functionality that a customer wants.

Software Blades are portable from appliance to appliance, allowing for the simple repurposing of your existing hardware.

Do you have an appliance you no longer need.  Well, take the &quot;Software Blades&quot; from that appliance and move them to a different appliance, or distribute them amongst many of your other appliances.

Are you running an SSL blade on all your perimeter Gateways.  Would you rather move to an SSL only Appliance.  Simply move the SSL Software Blade  from each perimeter gateway to a single appliance, and VOILA you have an SSL Concentrator.

It is sad that a person of your intellect does not have enough common sense to really educate yourself on the offering of a Company you hope to compete against.

I look forward to any comments you may have.</description>
		<content:encoded><![CDATA[<p>Nir,</p>
<p>I would expect that a person of your intellect would not base his judgement solely on a press release.  It seems that you have formed an opinion based on minimal information, and bitterness towards your former employer.</p>
<p>Israeli Companies, and Check Point in particular, guard their information and product roadmaps very carefully.  You should know this as well as anyone.</p>
<p>I am a current Check Point employee, and having taken the time to truly understand<br />
the Software Blade architecture, I believe that it is revolutionary in the flexibility it provides our customer.  If you were to look at the pricing associated with this architecture, it is quite easy to see that under this architecture, this will actually lower the cost to our customers.</p>
<p>Once the true nature of the Software Blade Architecture and other upcoming announcements have been made, I am confident that the security Industry will understand the true nature of Check Points direction.  Innovation is still the primary focus at Check Point, and if you actually took the time to read more than a press release, you could actually provide an informed Opinion.</p>
<p>The screenshot that one poster points to as having the &#8220;Firewall&#8221; grayed out, is nothing more than a screenshot of a single appliance, which includes the firewall blade. This is not a requirement when purchasing an appliance, and appliances can absolutely be purchased with only the functionality that a customer wants.</p>
<p>Software Blades are portable from appliance to appliance, allowing for the simple repurposing of your existing hardware.</p>
<p>Do you have an appliance you no longer need.  Well, take the &#8220;Software Blades&#8221; from that appliance and move them to a different appliance, or distribute them amongst many of your other appliances.</p>
<p>Are you running an SSL blade on all your perimeter Gateways.  Would you rather move to an SSL only Appliance.  Simply move the SSL Software Blade  from each perimeter gateway to a single appliance, and VOILA you have an SSL Concentrator.</p>
<p>It is sad that a person of your intellect does not have enough common sense to really educate yourself on the offering of a Company you hope to compete against.</p>
<p>I look forward to any comments you may have.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe Dudmeyer</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-297</link>
		<dc:creator>Joe Dudmeyer</dc:creator>
		<pubDate>Mon, 23 Mar 2009 21:12:44 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-297</guid>
		<description>Nicely said, Jordan.  There are alot of features that CheckPoint has that we&#039;re still waiting for in PAN.  Active/Active HA w/Loadbalancing comes to mind as one big one.  With all the other possibilities out there in the Firewall and &quot;Next Gen Firewall&quot; arena, Mr. Zuk and his coders should be working alot harder in order to keep up rather than complaining about the various competitors.  With his background, you&#039;d think PAN would be WAY out in front.</description>
		<content:encoded><![CDATA[<p>Nicely said, Jordan.  There are alot of features that CheckPoint has that we&#8217;re still waiting for in PAN.  Active/Active HA w/Loadbalancing comes to mind as one big one.  With all the other possibilities out there in the Firewall and &#8220;Next Gen Firewall&#8221; arena, Mr. Zuk and his coders should be working alot harder in order to keep up rather than complaining about the various competitors.  With his background, you&#8217;d think PAN would be WAY out in front.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Steve Rielly</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-296</link>
		<dc:creator>Steve Rielly</dc:creator>
		<pubDate>Mon, 16 Mar 2009 02:39:37 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-296</guid>
		<description>And this would be why we have become the Palo Alto Networks VAD in New Zealand, so I can go out there and convert all those Checkpoint firewalls :-)</description>
		<content:encoded><![CDATA[<p>And this would be why we have become the Palo Alto Networks VAD in New Zealand, so I can go out there and convert all those Checkpoint firewalls <img src='http://www.paloaltonetworks.com/researchcenter/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-294</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Sat, 14 Mar 2009 02:13:09 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-294</guid>
		<description>I had exactly the same thought when reading the information about Software Blades. A true blade-based system where virtualisation and resource sharing for network security, authentication, VPN and application monitoring would be potentially innovative, especially if the components could be properly distributed and centrally managed. However the implementation here really does look like a new way of cutting up the same old pie, with the advantage of being able to go the well and get the existing userbase to do functionality upgrades that really provide more of the same.

The real pity is that there are a few really interesting things hidden in there - the new IPS engine is interesting, and the retooling of the inspection mechanism to improve efficiency has potential. So why promote the product based on the weakest area in Check Point&#039;s portfolio, it&#039;s licensing? As a veteran of Check Point, I&#039;m also depressed about this...</description>
		<content:encoded><![CDATA[<p>I had exactly the same thought when reading the information about Software Blades. A true blade-based system where virtualisation and resource sharing for network security, authentication, VPN and application monitoring would be potentially innovative, especially if the components could be properly distributed and centrally managed. However the implementation here really does look like a new way of cutting up the same old pie, with the advantage of being able to go the well and get the existing userbase to do functionality upgrades that really provide more of the same.</p>
<p>The real pity is that there are a few really interesting things hidden in there &#8211; the new IPS engine is interesting, and the retooling of the inspection mechanism to improve efficiency has potential. So why promote the product based on the weakest area in Check Point&#8217;s portfolio, it&#8217;s licensing? As a veteran of Check Point, I&#8217;m also depressed about this&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jordan</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-293</link>
		<dc:creator>Jordan</dc:creator>
		<pubDate>Tue, 10 Mar 2009 20:26:10 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-293</guid>
		<description>Come on Nir. You&#039;re a fine innovator, a good manager and an excellent programmer.
As for trash talk, leave it for the basketball court. I&#039;d rather read you saying encouraging comments about your direction or any fruitfull direction of other companies which you appreciate.</description>
		<content:encoded><![CDATA[<p>Come on Nir. You&#8217;re a fine innovator, a good manager and an excellent programmer.<br />
As for trash talk, leave it for the basketball court. I&#8217;d rather read you saying encouraging comments about your direction or any fruitfull direction of other companies which you appreciate.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dchen</title>
		<link>http://www.paloaltonetworks.com/researchcenter/2009/02/innovationlicensingscheme/comment-page-1/#comment-292</link>
		<dc:creator>dchen</dc:creator>
		<pubDate>Fri, 06 Mar 2009 07:06:36 +0000</pubDate>
		<guid isPermaLink="false">http://securitynirvanablog.wordpress.com/?p=87#comment-292</guid>
		<description>Hi Toby,

If you look at the picture closely,
http://www.checkpoint.com/products/softwareblades/architecture/index.html
you will see the firewall is gray out. You can&#039;t buy the others without a firewall.

CP can just give you all the blades then provide a enable/disable button for you to chose. This is what UTM vendor does. You can have protection profile with different feature turned on.

licensing it is.</description>
		<content:encoded><![CDATA[<p>Hi Toby,</p>
<p>If you look at the picture closely,<br />
<a href="http://www.checkpoint.com/products/softwareblades/architecture/index.html" rel="nofollow">http://www.checkpoint.com/products/softwareblades/architecture/index.html</a><br />
you will see the firewall is gray out. You can&#8217;t buy the others without a firewall.</p>
<p>CP can just give you all the blades then provide a enable/disable button for you to chose. This is what UTM vendor does. You can have protection profile with different feature turned on.</p>
<p>licensing it is.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
