-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Formerly the OnGuard Firewall. I hope it's been completely reworked.
I'm no programmer, and it looked weak to me. (my 2 cents)
R. Michael Williams, MCSE
Nashville, TN
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of James Smith
> Sent: Thursday, February 18, 1999 4:07 AM
> To: 'Chris'; Warren Brickett
> Cc: [EMAIL PROTECTED]
> Subject: Elron Firewall
>
>
> Has anyone heard of Elron Firewall before - seems quite cheap and
supposed
> to be very easy to install.
>
> It's available from www.miseurope.co.uk
> <http://www.miseurope.co.uk> and by
> Elron Software Inc. at www.elronsoftware.com
> <http://www.elronsoftware.com>
> though I can't get through to any of their sites now.
>
> Either their firewall's too tight, or they went bust? I have a 30
> day trial
> of the software and was considering installing it at our US and UK
offices
> as it is also able to do VPN between the two sites.
>
> Any opinions would be greatly appreciated, or if anyone could
suggest
> anything better in the same price range (for 56/64k leased lines)
>
> Regards,
>
> James Smith
>
> -----Original Message-----
> From: Chris [mailto:[EMAIL PROTECTED]]
> Sent: 17 February 1999 20:35
> To: Warren Brickett
> Cc: [EMAIL PROTECTED]
> Subject: Re: Comparing Technologic's Interceptor and
> Checkpoint's Firewall-1
>
> At 4:37 PM +1100 2/15/99, Warren Brickett wrote:
> >
> >
> >Can anyone help me with this decision I need to make?
> >Does anyone have any opinions on which is the better of the
> two firewalls
> >to go with: Checkpoint or Interceptor? (and any reasons why
> one is
> >preferable to the other)
> >
>
> Warren, better is relative to one's criteria, so I don't
> want to go
> down that subjective path.
>
> But, I find the Interceptor impressive, due to the broad
> range of
> functions that it puts in one box. My take is that it's a
> secure
> Bastion Host, which not only proxies, but supports split
> DNS, a mail
> relay, will do address/port mapping (can hide your internal
> network)
> and filters. And cost a fraction of Ckp's FW. I don't think
> it's
> a full solution, but can be a key contributor. Surround it
> with
> a couple of C-2611s with Statefull packet filtering (which I
> haven't
> yet tested) and it sounds like a good start. Add ISS's
> RealSecure,
> Tripwire and few other tools to monitor system states, logs
> and
> active response to network anomalies and the Interceptor
> seems a good
> compliment to this type of setup.
>
> This advice is worth at least what you paid for it :-)
>
> But hopefully this will generate some substantive debate.
>
>
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2
iQA/AwUBNszw+qfPtcH7+PP+EQI0YwCfUZTT80WB+3V+xziBJCUHcPqn/doAn3aA
qeWrU0PQEWCRPWlV/Dj368qn
=zxQZ
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
