> From: ext Enrique Martin [mailto:[EMAIL PROTECTED]] > Hi all, > have do you do a migration of the policies from Gauntlet to Firewall-1 > in diferents machines? > I think that it doesn�t be too much difficult, but I would > like to have > some advices from someone who has do it. Somebody could help me?
There are major differences in the products in the way that they handle the security policy. One of course is that Gauntlet is Proxy based and FW-1 is statefull inspection so the configuration is done a bit differently. In Gauntlet you configure the proxies and in FW-1 the configuration is done on protocol/port basis. More important differentiator is FW-1's object orientation vs. Gauntlets Policy orientation. This will make it very difficult to just move policies from Gauntlet to FW-1. And it is always a good idea to sometime go through the security policy and try to understand what has been configured in it during past couple of years. rgds, Harri _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
