mouss ha escrito:
> At 02:22 13/05/01 -0500, Martin Hoz wrote:
> >"Miller, Ari" ha escrito:
> >
> > > Has anyone had the "opportunity" to convert a Checkpoint firewall to
> > > PIX? I was hoping to leverage other people's experience with this
> > > conversion -- this particular Checkpoint firewall has about 45
> > > explicit rules, but quite a few objects involved. Is there a GUI tool
> > > already available that I haven't found yet?
> > > Has anyone written a script that might help?
> >
> >Just curious. Why are you wanting to change?
> >If you're looking for a GUI, Check Point's one is a very easy-to-use,
>
> no, he is apparently looking for a FW that protects his network, not for
> something to click and die.
?
I don't got it. Could you comment a bit more on this, please?
>
>
> >powerful-to-deploy one...
>
> ahem' do you work for a reseller?
I used to...
>
> why would you think the pix isn't powerful-to-deploy?
I never said that.
I mean the GUI, not the firewall. FW-1's GUI is the best one I've seen,
easy-to-use (a few click and it's done), and powerful-to-deploy (allows
me to make very granular changes in my security policy.
>
> why would you think openbsd+ipf wouldn't be?
I never said that. But AFAIK; openbsd+ipf does not have a GUI:
>
> why would you think linux+[iptable|ipchains] wouldn't be?
Ditto.
>
> Or are you just repeating what their silly sales guys claim?
Nope. I've experience with some firewalls around (including these, SunScreen,
Gauntlet, FWTK and others).
It's simply my experience what I'm talking about...
--
Martin H. Hoz-Salvador
EX-A-FIME
http://gama.fime.uanl.mx/~mhoz
"Daddy, Why doesn't this Magnet pick up this Floppy Disk?"
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]