hello
On Thu, 24 Jun 1999, Matt Brock wrote:
> Hi.
>
> I'm going to be implementing a new firewall system in the near
> future, and I'd benefit from any advice that people on this list
> would be kind enough to give.
>
> I want to use a proxying firewall that is a good, solid, secure,
> tried-and-tested system, and my research has pretty much narrowed
> the choice down to Gauntlet and Raptor.
>
> I want to use Solaris as the OS platform, since I have no experience
> of other Unixes (except Linux), and I don't want to use NT because
> there are still questions surrounding its ability to be secure,
> in addition to which I don't like NT anyway due to the fact that
> it's unstable and bluescreens for no apparent reason, it doesn't
> have a very nice logging system, it doesn't allow you to telnet
> into it, and other such things.
Hi, if you use a plain(cleartext-) telnet to login to your firwall/server
you have a big security issue on your hands cause usually if one
would logon to their firewall it would likely be for maintance, thus
requiring your SuperUser passwd which could sniffed that way.
I would advice you to start using ssh clients immediatly. Ssh clients are
just like telnet except all transferring information is encrypted.
f-secure.com has for both windoze and unix ssh software.
-
Personally i've chosen to use a linux platform for my firewall.
Suse.com
I use redhat for my servers which is far better than NT -server
i use the linux box to emulate a windoze share so its accessable to all
users. its all nt can do and more .
i'm thinking of using an opensource firewall like fwtoolkit.
Has anyone got experience with transparant proxylevelfirewalls
or has chosen for a specific commercial firewall on linux?
any tips would be apprecciated
davidx
[EMAIL PROTECTED]
> I haven't really been able to get a very clear picture as to
> whether I should go for Gauntlet or Raptor - I've downloaded
> the management console demos, and Raptor _appeared_ to be the
> most intuitive and configurable, but it isn't very easy to tell
> from that. Any experience from users would be much appreciated.
>
> Also, I would like to know if either of them will run on an
> Intel-based Solaris platform (I suspect the answer to that one
> is 'no')? What is the minimum hardware spec that I should be
> looking at for a 100-user version of both of these systems?
>
> Which one tends to be cheaper, and which one tends to
> be better for support and documentation?
>
> Any answers to these questions would be much appreciated, as
> would any general advice regarding the pros and cons of both
> systems.
>
> Regards,
>
> Matt
> --
> Matt Brock, System Administrator, IPD
> 0171 643 9228 [EMAIL PROTECTED]
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]