For a distributed deployment of Check Point R80, excluding SmartConsole, how many machines does Tom need?

In a distributed deployment of Check Point R80, there are key components that need to be established to ensure a robust and functional security architecture. Specifically, Tom will require at least two machines in addition to the SmartConsole.

One machine will typically be configured as the Security Management Server, which serves as the central management point for all security policies, logs, and configurations across the environment. The second machine is commonly set up as a Security Gateway, which is responsible for handling the actual traffic and enforcing security policies.

These two components are essential in a distributed environment to maintain scalability and manageability. The Security Management Server and Security Gateway have distinct roles that need to be fulfilled separately, thus necessitating a minimum of two separate machines.

Including SmartConsole, which is simply a client interface for management, does not count as part of the backend infrastructure, confirming that two machines are a requirement distinct from any workstation used for management purposes. This leads to the conclusion that for Tom's deployment configuration, he requires at least two machines.