People

since you brought up the subject of Websense and Checkpoint - I guess
you havn't heard the disastour stories! at least when using websense
with 4.0 Sp1 to 4.1SP2, the Security Server from checkpoint is buggy
and under load will give sluggish performance. The legend goes that
Checkpoint has acknowledged the problem and not fixed it for years!

Checkpoint Support from HQ gave me the run around for couple of weeks
before i realised what was happening.

Websense can work apparently without Checkpoint if you use like
Cisco Caching engine box! i am trying that out. a small co like
websense whose product depends on Checkpoints security server working
well is at their mercy till they fix http security server bugs!
otherwise your users will beat you up due to sluggish http performance
or no http at all - when you get "FW:1 unable to connect"

just my own experiences and culled from others on the list.
be very carefully implementing this. you can run websense on the FW
box or off it - however both configs will break with connections
over 3300 or so....you might get away by load balancing etc.

i am sorry i had to write this... just my 2 cents and lots of sleepless
night experiences.
regards
------------------------------

Date: Mon, 5 Jun 2000 16:13:07 +0100
From: "Mike Anning" <[EMAIL PROTECTED]>
Subject: [FW1] Web Proxy/Websense

Hi all

I would very much appreciate any thoughts on this one....

We would like to configure a Web Proxy along with Websense for outbound http
thus allowing only the Web Proxy outbound access to the web which is filtered
through Websense and no inbound access.

The problem here is that we do not have any specific experience of Web Proxy
software and would appreciate any thoughts on which is the best to go for, MS,
Netscape, Websense Proxy et al.

Many thanks

Mike

Date: Mon, 5 Jun 2000 11:35:09 -0400
From: [EMAIL PROTECTED]
Subject: [FW1] websense: CVP or Proxy mode for performance?

Would like to solicit members on what they deem the most appropriate
configuration for Websense with FW-1.

a) as a proxy   (standalone or on the same box as FW-1)
b) as a CVP server

I'm interested in which configuration delivers the best performance.




Karim Ismail
Internet: [EMAIL PROTECTED]




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to