Nortel serves as a platform for the checkPoint
firewall so there is an option to have
firewall-1.(This was to be discontinued soon.) The
customers who had FW-1 already on the Contivity would
get free upgrade to the Nortel firewall.
Nortel contivity byitself, is just a VPN hardware
device with some minimal packetfiltering capabilities
and is extremely simple to configure and use.
VPN from site to site for CES (contivity) just means
that the traffic would be encrypted. It does not give
firewall features till you install CheckPoint on it
separately or the Nortel firewall which may be
available now.
--- Brent Stackhouse <[EMAIL PROTECTED]>
wrote:
> Hello,
>
> I need a little help/info regarding
> Nortel's Contivity Extranet Switch and
> what the heck it is and is not able to
> do. I would love to RTFM but I've been
> given three firewall platforms to hook
> up production VPNs to within two weeks
> and I'm a little pressed for time.
>
> What I do know is that there is a
> Contivity firewall option and an FW-1
> option. I just crashed through FW-1
> training last week so I'm familiar
> with that, more or less. My requirement
> is to set up a site-to-site VPN using
> Nortel Contivity switches on both ends,
> running an IKE/IPsec tunnel that only
> allows our "encryption domain" boxes to
> speak with each other, in FW-1 parlance.
>
> Pretty straightforward with PIX and FW-1
> but I'm still unclear as to the
> capabilities of the Nortel stuff. Any
> tips, info, or pointers to doc are very
> welcome. If I'm missing the obvious
> (like this product sucks or I'm an idiot),
> let me know. Thanks.
>
> Brent Stackhouse
> Security Analyst
> 2ndWave, Inc.
> -
> [To unsubscribe, send mail to
> [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
__________________________________________________
Do You Yahoo!?
Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
