This chapter is from the book
Management Console
If your single-gateway product does not include a management console, you need to obtain a separate license for the management console. You can install the management console on the same platform as the firewall. If you plan on managing multiple firewalls or use High Availability, having your management console on a different platform is recommended.