I don't know for sure but logic tells me that you should be able to look at
object.C and the size should tell you which should be better. I do however
believe that rule order (like with router acls) is a big factor.
At 08:10 AM 7/24/00 -0400, you wrote:
>
>Hi,
>
>Does anyone know enought about the internals of FW-1 to take
>a guess as too what kind of setup would perform better:
>
> - Less Rules, more objects/rule
> - A lot of Rules, very little objects total
>
>I'm not sure if it would make difference or not but I would
>like to know.
>
>Does Checkpoint publish performance numbers that are based on
>number of network objects, number of users or the number of
>rules in policies?
>
>--
>Charles Gagnon | My views are my views and they
>http://unixrealm.com | do not represent those of anybody
>[EMAIL PROTECTED] | but me.
>
> If someone with multiple personalities threatens
> suicide....is it considered a hostage situation?
> -- Dennis Miller
>
>
>===========================================================================
=====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>===========================================================================
=====
>
>
Tony Miedaner
Network Security Engineer
Network Engineering Unit
Appliedtheory Inc.
315-453-2912 x5361
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
