Explanation:
Deploying OPSEC Servers OPSEC solutions, such as CVP and UFP servers are deployed on dedicated servers. These servers are typically either placed in the DMZ, or on a private network segment. This allows fast, secure connections between the CVP servers and the VPN-1 Pro Gateway.
Performing scanning at the network perimeter is both safer and more efficient than performing the scanning at the desktop or the application servers.
FTP, HTTP & SMTP servers are typically placed in the DMZ - Checkpoint help depicts dedicated subnet for CVP 7 UFP servers.

---