The Nokia is not really a black box. First you need to treat it as a
router - define VRRP, interfaces, routes or routing protocol, ACLs if any,
etc. If you aren't familiar with routing you will have trouble with
this. Then you work with FW-1 on top of that. Make a couple of allowances
in the FW rules for the VRRP setup. It is probably worth it for an NT shop
to pay for the initial install.
hermit1
At 06:36 AM 6/9/00 +0800, Mayne, Peter wrote:
>Assume I want to install a highly available firewall. The two options under
>consideration are a pair of Nokia systems using VRRP, and a pair of Windows
>NT systems with the CheckPoint HA module. A Solaris or other UNIX solution
>isn't being considered because an NT shop doesn't want to learn how to
>manage a Solaris system, whereas a Nokia can presumably be treated like a
>black box.
>
>Cost aside (since the Nokia solution seems to be cheaper), what are the pros
>and cons of one vs the other? Under what circumstances (if any) would I
>prefer a particular Nokia or NT solution?
>
>
>PJDM
>----
>Peter Mayne, Compaq Computer Australia, Canberra, ACT
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
