Elron's CommandView firewall has been completely reworked.
We acquired the OnGuard Firewall from ON Technology Corporation a year and
a half ago. ONGuard was a standalone, with a proprietary OS (Secure32OS),
that ON Technology shipped pre-installed on a 486 box (!).
We've ported the firewall to NT, and enhanced both the Secure32OS version
and the NT(CommandView) version. Both versions are software only, stateful
inspecting (SMLI) firewalls that were built with a priority on ease of
installation and configuration. A lot of people have interpreted 'easy to
install' as simple or weak. It's the, "if it's not a pain to configure it
can't be any good" line of reasoning. We just put more work into the User
Interface and install routines, than other vendors did.
Based on all the head to head comparisons we've entered, the product
performs well. [See this month's Small Business Computing and
Communications mag for example, where we were top-rated, and bested
CyberGuard, AltaVista, Guardian, and NetFortress in the small-to-medium
category].
Given that one study pointed to improper configurations resulting in 94% of
all successful instrusions, I'm surprised that more companies have spent
the time to simplify their install/configuration code.
We're working on enhancements to both versions, in particular the NT
version will be integrated into the CommandView family, with our Internet
Manager (http blocking and monitoring), Bandwidth Optimizer (bandwidth
allocation and monitoring), and soon to be released content filtering
product.
Hope this helps.
Duncan Perry
Elron Software, Inc.
"R. Michael Williams, MCSE" <[EMAIL PROTECTED]> on 02/19/99 12:04:58
AM
Please respond to [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
cc: "James Smith" <[EMAIL PROTECTED]>, "'Chris'" <[EMAIL PROTECTED]>,
"Warren Brickett" <[EMAIL PROTECTED]> (bcc: Duncan Perry/Elronsw)
Subject: RE: Elron Firewall
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Formerly the OnGuard Firewall. I hope it's been completely reworked.
I'm no programmer, and it looked weak to me. (my 2 cents)
R. Michael Williams, MCSE
Nashville, TN
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of James Smith
> Sent: Thursday, February 18, 1999 4:07 AM
> To: 'Chris'; Warren Brickett
> Cc: [EMAIL PROTECTED]
> Subject: Elron Firewall
>
>
> Has anyone heard of Elron Firewall before - seems quite cheap and
supposed
> to be very easy to install.
>
> It's available from www.miseurope.co.uk
> <http://www.miseurope.co.uk> and by
> Elron Software Inc. at www.elronsoftware.com
> <http://www.elronsoftware.com>
> though I can't get through to any of their sites now.
>
> Either their firewall's too tight, or they went bust? I have a 30
> day trial
> of the software and was considering installing it at our US and UK
offices
> as it is also able to do VPN between the two sites.
>
> Any opinions would be greatly appreciated, or if anyone could
suggest
> anything better in the same price range (for 56/64k leased lines)
>
> Regards,
>
> James Smith
>
> -----Original Message-----
> From: Chris [mailto:[EMAIL PROTECTED]]
> Sent: 17 February 1999 20:35
> To: Warren Brickett
> Cc: [EMAIL PROTECTED]
> Subject: Re: Comparing Technologic's Interceptor and
> Checkpoint's Firewall-1
>
> At 4:37 PM +1100 2/15/99, Warren Brickett wrote:
> >
> >
> >Can anyone help me with this decision I need to make?
> >Does anyone have any opinions on which is the better of the
> two firewalls
> >to go with: Checkpoint or Interceptor? (and any reasons why
> one is
> >preferable to the other)
> >
>
> Warren, better is relative to one's criteria, so I don't
> want to go
> down that subjective path.
>
> But, I find the Interceptor impressive, due to the broad
> range of
> functions that it puts in one box. My take is that it's a
> secure
> Bastion Host, which not only proxies, but supports split
> DNS, a mail
> relay, will do address/port mapping (can hide your internal
> network)
> and filters. And cost a fraction of Ckp's FW. I don't think
> it's
> a full solution, but can be a key contributor. Surround it
> with
> a couple of C-2611s with Statefull packet filtering (which I
> haven't
> yet tested) and it sounds like a good start. Add ISS's
> RealSecure,
> Tripwire and few other tools to monitor system states, logs
> and
> active response to network anomalies and the Interceptor
> seems a good
> compliment to this type of setup.
>
> This advice is worth at least what you paid for it :-)
>
> But hopefully this will generate some substantive debate.
>
>
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2
iQA/AwUBNszw+qfPtcH7+PP+EQI0YwCfUZTT80WB+3V+xziBJCUHcPqn/doAn3aA
qeWrU0PQEWCRPWlV/Dj368qn
=zxQZ
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
