On Wed, 1 Nov 2000, Ryan Reynolds wrote:
>
>
> Brian Ford wrote:
>
> > Martin,
> >
> > <snip>
> > > >
> > > > Does adding FW-1 to a Nokia box overload the box? That's another vendor's
> > > > software product on a Nokia blade. You rely on those vendors abilities to
> > > > integrate and perform joint testing.
> > >
> > >The Nokia Box is only a Firewall! And only does firewall tasks... :-P
> >
> > Huh? Nokia sells that product as a router. IPSO is a router OS. CheckPoint adds
>firewall capability.
>
> The Nokia is becoming more widely used for multiple applications. For example, ISS
>now has a RealSecure network engine for IPSO. Now, I am not saying that you should
>run FW-1 and RealSecure on the same Nokia, but it is good to keep in mind that these
>nice little boxes are definitely not "only
> firewalls".
>
an important question that still remains here to be asked concerns the
fact that not too many months back, IDS systems were prone to DDOS from
extensive probes. Now even if run on it;s own 'blade' or CPU, does this
not then affect the other 'blade'/CPU when the systems are stressed
heavily?
Then again there is another issue with mixed boxen, that is often
overlooked in this multi-tasking era:
when your vcr/tv/toaster oven has a problem with one of it's functions,
and is sent for repairs, it means the other functions are by default also
disabled, so, when you router/firewall/IDS system suffers in one of it;'s
functions, it oftemn, most often in fact, means all other functions are
down until repaired.
Not that I back down from my earlier assessment of the cisco IDS product.
Thanks,
Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
***testing, only testing, and damn good at it too!***
OK, so you're a Ph.D. Just don't touch anything.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]