Since the firewall has to forward packets and enforce security between
interfaces in either case, I wouldn't expect any difference at all in
performance (unless your switch fabric on the inside is extremely busy).

Dan Hitchcock
CCNA, MCSE
Network Engineer
Xylo, Inc. (formerly employeesavings.com)
425.456.3970
The work/life solution for corporate thought leaders


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 10, 2000 9:20 AM
To: Keith Mccann
Cc: [EMAIL PROTECTED]
Subject: Re: [FW1] Proxy server and Firewall-1





I would advise you to separate the proxy server from the
firewall.  Depending on the number of users but there will be a
big degradation if you put the proxy server on the same box as
the firewall.

-Hungdan Ly




"Keith Mccann" <[EMAIL PROTECTED]> on 10/10/2000 11:35:55 AM
To:   [EMAIL PROTECTED]
cc:    (bcc: Hungdan Ly/New York/ACMC)

Subject:  [FW1] Proxy server and Firewall-1




I am currently using a Deerfield Wingate proxy server in the DMZ
of a
Firewall-1 firewall

Is it likely to improve performance if I move the proxy server
inside the
firewall, or is this likely to cause any major issues?

Regards

Keith McCann




============================================================================
====

     To unsubscribe from this mailing list, please see the
instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====







============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to