RE: What is best...

[Dan McGinn-Combs]

After long deliberation, we decided to go with Checkpoint on Solaris using SUN Hardware not necessarily for all the technical reasons. Sure it would have been a simpler install or a simpler configuration to use Windows. Certainly, Intel hardware might have been slightly less expensive. But overall I think using this combination provided me with a couple of additional pluses over Intel/Windows combination:   a) The ability to implement a minimal install of Solaris, reducing the number of potential exploits to a minimum. I'm not at all sure this is possible on any version of Windows without a great deal of effort.   b) Fear factor, we support ten or twelve firewalls worldwide for the company and it helps to have something mostly deemed as "too complicated" for the mere mortal. Using Windows tends to invite a "hey why can't I look at..." question from end users.   c) Standard support, yes, I've been guilty of plugging in a 220volt power cord while the power config switch was set to 110volts. Ouch... but the Sun support guys (for a price) had a new powersupply over to me within hours.   d) Universal buy-in, providing this service to so many remote sites in different countries required us to use something everyone would accept. Sun, Solaris and Checkpoint provided that politically correct platform.   Dan   -----Original Message----- From: Matthew Isaacs [mailto:[EMAIL PROTECTED]] Sent: Monday, July 09, 2001 1:13 PM To: [EMAIL PROTECTED] Subject: What is best... With fear of starting a barrage of emails.... Or sounding ignorant but would like to get feed back from some people with experience in wide range of scenarios.   Looking at firewalls, what I'd like to know is what the best scenario is, Please no personal opinions.   CP FW -1 4.1 running on Solaris with SUN hardware CP FW -1 4.1 running on Solaris with Intel hardware CP FW -1 4.1 running on Windows Any other fw running on intel   Currently running CP FW-1 4.1 on solaris with Sun hardware is currently cpu bound.   Need to be able to manage Bandwidth as well either from same box or possible another.   Sites where there is some data showing tests etc would be good...   Matthew