Securemote works on small packet only !!!

2001-01-29 Thread Stephen Chiu
Hello everybody, I am testing Securemote connection on my company netwrok. I got a problem that all file greater than about 1.5k bytes failed to transmit through the securemote session and the connection eventally time-out and dropped. I got and same "big file failure" problem when I did web

RE: The difference between PIX and Gauntlet as a Application firewall

2001-01-29 Thread Chris Tobkin
http://www.interactiveinfosec.com/?openMenus=-1+10+60selectedIndex=61 Go down to the "Comparing Firewalls and Firewall Technologies" section. Note that PIX is more of a packet filtering/stateful inspection type of firewall, whereas Gauntlet is a proxy-based firewall. // Chris [EMAIL PROTECTED]

Re: Firewalls - Raptor, Gauntlet, Sidewinder.

2001-01-29 Thread Jeffery . Gieser
Ben Nagy said: #Can Sidewinder be considered for "general purpose" installs with its rep for #price / complexity? Sidewinder is definitely a complex product but a good firewall admin should be able to handle a complex product. One of the things that I really like about the Sidewinder is the

Firewalls - Raptor, Gauntlet, Sidewinder

2001-01-29 Thread lists
Hi Ben, I'd like to see a reasonable comparison as well - though I don't expect we'll really see it. From experience all three boxes work fine in so-called "normal" conditions...but fail miserably when the conditions are not "normal"... Gauntlet seems quite good at supporting small offices,

RE: Firewalls - Raptor, Gauntlet, Sidewinder

2001-01-29 Thread Ben Nagy
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 30 January 2001 10:24 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Firewalls - Raptor, Gauntlet, Sidewinder [...] Gauntlet seems quite good at supporting small offices, but fails

RE: Firewalls - Raptor, Gauntlet, Sidewinder

2001-01-29 Thread Bill Royds
We run Symantec (Axent) Raptor on a twin 296Mhz Sparc CPU 512MB ram) Solaris platform. We support 5,000 users and 1.3 million hits(files) a day, 2/3 Internal users, 1/3 visitors to our web sites. It rarely gets above 40% CPU usage so capacity is not too much of a problem. This gives about

Firewall-1 Rulebase Maximum Size

2001-01-29 Thread Smedegaard, Paul C
Here's the environment: HP-UX, 512MB RAM, Firewall-1 4.0 Is there a theoretical maximum size or number of rules that I can have? If so, what are the parameters and input that go into this calculation? How can I increase the rulebase size if necessary? Any and all help is appreciated.

iptables Traffic Control

2001-01-29 Thread Patrick McHardy
Hi! I'm trying to set up traffic shaping on my firewall. The firewall is also serving as a ftp-server and is connected to my provider through a DSL-Link (dynamic ip), 768k down- and 128k upstream. What I want to do is: Split my (upstream) link in two classes using tc, one with 128k, one with 0k.

My FreeBSD Firewall

2001-01-29 Thread mharding
Hello. I am building a Firewall and have some questions about how to implement it. The basic firewall is a FreeBSD box running squid for transparent proxy, IPFW for dummynet to rate limit syn's, and IPF as my main statefull packet filter. The problem I have is with putting this into