<RELIGOUS ARGUMENT>
> Not that anyone cares.. but I MUST disagree. There is no way
> in HELL an app proxy is faster than stateful inspection.
Read your sentence back to yourself. It is a contradiction
in terms.
> To date, the fastest firewall for just throughput is PIX
<ASBESTOS UNDIES>
PIX is not a firewall.
</ASBESTOS UNDIES>
[...]
> some independant testing is under way that rates the IP 650 at around
> 120Mb's throughput).
[...]
> At the axent site they are excited to have tripled their
> throughput from 13Mb's to 45Mb's.
Now compare apples with apples.
> Don't get me wrong, I know this number is NOT a definitive
> yardstick by which to measure how "good" a firewall is, but
I agree. In fact, most industries regard the 'apples -vs-
oranges' method of statistical analysis to be invalid [and|or]
doubtfull.
> to say Raptor and (god help us all) GAUNTLET are "real enterprise
> firewalls" while FW-1 is a "wannabe" is in my opinion LUDICROUS.
[...]
> wouldn't put Gauntlet in my tool box.. esp. after the one I saw at my
> current site running on a Sparq Ultra 10 was "dogging itself out" with
> around 2000 users so badly, many were using their modems to dial into
> there ISP's because the performance was superior. The new
> FW-1 firewall we implemented is SO much faster, we have since
> added another 1000 internet users, and the performance is still
> MANY times faster).
Of course it is faster. You changed from apples to oranges. You
downgraded your security (does your Vice President - Legal know
about this?). You changed from application level gateway to
packet filtering - I'd be worried if it wasn't faster.
</RELIGOUS ARGUMENT>
Regards,
Geoff
This message is for the named person's use only. It may contain confidential,
proprietary or legally privileged information. No confidentiality or privilege is
waived or lost by any mistransmission. If you receive this message in error, please
immediately delete it and all copies of it from your system, destroy any hard copies
of it and notify the sender. You must not, directly or indirectly, use, disclose,
distribute, print, or copy any part of this message if you are not the intended
recipient. CREDIT SUISSE GROUP, CREDIT SUISSE FIRST BOSTON, and each of their
subsidiaries each reserve the right to monitor all e-mail communications through its
networks. Any views expressed in this message are those of the individual sender,
except where the message states otherwise and the sender is authorised to state them
to be the views of any such entity.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
