Although both are based on the same hardware the UTM-Edge devices are typically deployed in remote or branch offices of organisations which already have a checkpoint management infrastructure in place, e.g Check Point SmartCenter, Smart LSM or Provider-1. The Edge devices can then be managed centrally.

Safe@Office appliances are usually either standalone deployments or are managed centrally using SMP (Security Management Portal).

NOTE - Safe@Office appliances cannot be managed by SmartCenter, SmartLSM,or Provider-1.

Basic support plan includes;
Security and firmware updates; Email, web and chat support; Advanced replacement and Dynamic DNS.

Advanced support plan includes;
Security and firmware updates; Email, web and chat support; Advanced replacement; Dynamic DNS; Gateway antivirus updates and SmartDefense updates.

The Power Pack is an upgrade option that activates the following high-end security and networking features

• 25 Remote Access VPN profiles (only 5 profiles without Power Pack)
• Unlimited Site-to-site VPN profiles (only 2 without Power Pack)
• Port-based and Tag-based VLAN (only available with Power Pack)
• Port-based Security (802.1x) (only available with Power Pack)
• Secure HotSpot (Guest Access) (only available with Power Pack)
• Automatic Gateway Failover (High Availability) (only available with Power Pack)
• Dynamic Routing (OSPF) (only available with Power Pack)
• Wireless Distribution System (WDS) (only available with Power Pack)
• Multiple Access Points (only 1 access point without Power Pack)
• Multiple bridge support (only 1 without Power Pack)
• Advanced Traffic Shaper (QoS) (basic Traffic Shaper without Power Pack, including four static preconfigured classes)

YES - Please Nubix can supply either the "plug-top" type power supply or the "laptop" type power supply.  If you are using the rack mount kit then this has fixings for the Laptop type power supply.

Please let us know which country you require your power supply for.

Yes.

Each Safe@Office license includes licenses for Check Point VPN-1 SecuRemote to be used with Safe@Office.

Yes,  however the Safe@Office appliance does not support the policy server functionality typically found on the higher end Checkpoint solutions.

A user (or network node) is defined as a computing device that attempts to traverse the firewall. For example, any IP address that tries to pass through the firewall is counted. The IP address is counted even if it is blocked due to a specific rule configuration.
Note: Check Point does not differentiate between multiple users using a single machine, that is, a single IP address. In this scenario those individuals will still be counted as one user.

Safe@Office enforces the count per license. When the count is exceeded, subsequent users will not be allowed access to the WAN. In addition, an error report will be logged and you will receive a warning.

No. The remote access license limit relates only to external VPN connections on the WAN interface.

YES.  The High Availability feature is included in the Power Pack upgrade. Customers can purchase a second appliance to create a HA cluster

Since Safe@ appliances are very small and light they can be susceptable to theft, to help counter this all Safe@office appliances have a slot which will take a standard Kensington lock laptop anti-theft device.

Yes.  On Safe@ appliances which have USB ports

Safe@Office supports comprehensive connectivity capabilities include extensive support for USB based cellular modems (2G/3G) this allows various high availability deployments where cellular connectivity is used as a backup internet connection or for use in areas where conventional cabled internet infrastrucure is not available.Other USB modems (56K, ISDN) are also supported.

Please call us for available compatible USB modems.

Please note that there are USB ports on ADSL and wireless Safe@ 500 model appliances only.

YES -
 Embedded NGX 8.0 offers integrated ALG (Application Level Gateway) for Xbox LIVE game hosting. To host XBox LIVE games, XBox 360 requires gateways to use the
“Open NAT” method rather than the normal “Strict NAT” method. You can modify the
Embedded NGX appliance to allow hosting XBox LIVE games on your XBox 360 console,
by going to the Security > SmartDefense page and selecting Enabled in the XBox LIVE
Open NAT drop down list.

Note: This setting is required only if you want to host online games on your XBox 360
console. If you just want to join existing games, there is no need to enable this setting.

Many users may wish to use a USB modem to provide either a backup internet connection in the case of primary failure, or as a primary internet connection in areas where other wired internet connections are unavailable. Below in table 1 is a list of supported devices and associated firmware versions. Table 2 lists other  devices which we have found to work in the UK

Table 1

Brand	Model	Modem Type	Type	Firmware	Max Baud Rate
Siemens	ER75i	USB	GPRS/EDGE	8.0	230400
TZE Corporation	MF622	USB	3G/EDGE	8.0	230400
Novatel Wireless	X720	ExpressCard	CDMA	8.0	230400
Novatel Wireless	XU870	ExpressCard	CDMA	8.0	230400
Novatel Wireless	X950D	ExpressCard	CDMA	8.0	230400
Teltonika	T-USB GPRS Modem	USB	GPRS	7.5	230400
Teltonika	G10 UM1000	USB	GPRS	7.5	115200 only
Teltonika	H.1.8	USB	HSDPA	7.5	230400
Teltonika	ModemUSB/H7.2	USB	HSDPA	7.5	230400
Radicom*	MB-U	USB	Dialup	7.5
Nokia	E60	Phone	HSDPA	7.5	230400
HUAWEI	E220	USB	HSDPA	7.5	230400
AnyData	CDMA EVDO	USB	CDMA	7.5	230400
Sierra Wireless AirCard	595U	USB	EVDO Rev.A/0	7.5
Samsung	I607 Blackjack	Phone	HSDPA	7.5	230400
LASAT SPEED	II ISDN Modem	USB	ISDN	7.5
Novatel Wireless Ovation	U720	USB	EVDO Rev.A/0	7.5
Novatel Wireless Ovation	U727	USB	EVDO Rev.A/0	7.5	230400
Novatel Wireless Ovation	MC950D	USB	HSDPA/HSUPA	7.5	230400
Novatel Wireless Ovation	MCD3000	USB	EVDO Rev.A/0	7.5

 Table 2

Huawei (Vodafone mobile connect ) *	E272	USB	HSUPA/HSPDA /EDGE/3G/GPRS	8.0.39

* Tested in UK only by Nubix, not currently supported by Check Point.
Any devices listed in table 2 are based on the opinions of Nubix Limited and do not necessarily represent the views of Check Point.