Is there any reason you guys don't go for a CISCO PIX firewall appliance?
Cisco PIX Firewall Series
http://www.cisco.com/warp/public/cc/cisco/mkt/security/pix/prodlit/pie_ds.htm
Seven Firewalls Fit for Your Enterprise
http://www.networkcomputing.com/921/921f2.html
I really can't think of anything better than a blackbox that has a proprietary
OS and is a fast hardware solution instead of a slow, highlatency or at least
more vulnerable software that is running on a commercial (or linux) operation
system that has it's own security flaws and bugs.
Is anybody out there using it? We're looking for a complete inexpensive
firewalling /VPN solution for about 50 sites (at the beginning) and maybe up to
200 (in a year or 2).
How are the maintenance costs, uptime, misc numbers?
Thank you for your input
Cheers
Boris Pavalec [QPB]
Network / System Engineer [MCSE]
Highend Computing Systems
Switzerland - Zuerich
http://www.nt-admin.net
[EMAIL PROTECTED]
-----Original Message-----
From: derek [mailto:[EMAIL PROTECTED]]
Sent: Dienstag, 18. Mai 1999 01:46
To: BQuinata
Cc: derek; tcowell; firewalls
Subject: UNAUTHENTICATED: RE: Raptor Fire Wall 6.0
On Mon, 17 May 1999, Ben Quinata wrote:
> I've worked with Raptor Firewalls. I find it to be a very stable NT
> firewall. Like many of the reviews out there is a bit of a learning curve.
> I've work with both version 5.x and 6.x for NT. Version 6.x uses
> Microsoft's Management Console as its interface, personally I don't like it,
> but it does the job.
>
> Be aware Raptor firewall is an application/proxy firewall. The throughput
> is noticeably slower than a stateful inspection firewall.
>
> My two cents!
>
Very, very slow. I've got Raptor box that I'm trying to phase out in
favor of Checkpoint. (I'm also looking at the Watchguard stuff). My
biggest pet peeve about Raptor is the necessity to restart the management
console to allow various components of the firewall to pick up
configuration changes. For example:
After adding a protocol and then a GSP, you need to restart the RMC
inorder for the new service to appear in the Filters dialog.
Then again, the lack of command line tools for FW-1 is equally annoying.
+++ath
Derek Vadala, [EMAIL PROTECTED], http://www.cynicism.com/~derek
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
WINMAIL.DAT
