I am total agree with your point with Checkpoint licensing structure. And they are more expensive.
We are using it now. Not a perfect firewall. I think still a best firewall for a medium size network. A lot of vendor support them with OPSEC. I am using RealSecure from ISS work with Checkpoint.. Look like NetScreen have its own Intrude detection function.. How powerful their IDS function?? How many signiture they have inside the box?? Can NetScreen work with any market standard IDS software like ISS?? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 26, 2001 7:22 PM To: NT System Admin Issues Subject: RE: Ideas for firewall I just got rid of Checkpoint Firewall-1. Its support/licensing/reseller structure was a mess. I have stories that would make you want to file suit on my behalf... We just moved to a Netscreen 10. Cheaper than FW1 (or at least when we bought FW1). Support structure is better, licensing/support per year is cheaper ($600 vs. $1700). It runs on its own OS (so no inherent OS vulnerabilities), comes in a small (1U) self contained appliance, has a very good HTML interface to configure it with, and was set up in less than a day. The only, and I mean only weakness I've seen is reporting, but I've heard that the latest patch addresses that quite well. There is also WebTrends that you could use for reporting. Also, I like the VPN better than SecureRemote with FW1. Usually goes off without a hitch and is faster (IMHO). Last but certainly not least, take a look at any FW vulnerability report list you can find, and you'll see that Netscreen had one minor one last year and fixed it very quickly - most others had 3 to 10 in the same period. Evan -----Original Message----- From: Dean Cunningham [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 26, 2001 9:04 PM To: NT System Admin Issues Subject: RE: Ideas for firewall Aw come on, make a statement like that and yah gotta spill the beans :-) Define slow, what environment, network topology? cheers Dean -----Original Message----- From: Keith Johnson [mailto:[EMAIL PROTECTED]] Sent: Thursday, 27 September 2001 12:36 p.m. To: NT System Admin Issues Subject: Re: Ideas for firewall too slow ----- Original Message ----- From: Ross <mailto:[EMAIL PROTECTED]> Wakelin To: NT System Admin <mailto:[EMAIL PROTECTED]> Issues Sent: Wednesday, September 26, 2001 6:31 PM Subject: RE: Ideas for firewall It works, what more can you ask ---------- Ross Wakelin - Independent Information Technology Consultant Tel: +64 (0)3 3433186 Fax: +64 (0)3 3433196 Cell: +64 (0)21 334380 -----Original Message----- From: Martijn Eindhoven [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 26 September 2001 21:15 To: NT System Admin Issues Subject: RE: Ideas for firewall Anyone has any opinions on checkpoint one firewall-1? At 12:52 PM 9/24/2001 -0700, you wrote: would you be interested in this one? -----Original Message----- From: Darrin J. Carter [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Monday, September 24, 2001 11:31 AM To: NT System Admin Issues Subject: RE: Ideas for firewall Sonicwall is great, we are a reseller and currently have 10 clients using them. Darrin Carter CNE, MCP+I, MCSE Senior Systems Engineer Elegrity, Inc. 415.821.0900 (main) 415.826.7758 (fax) 415.726.0413 (direct) e-mail: [EMAIL PROTECTED] http://www.elegrity.com <http://www.elegrity.com/> -----Original Message----- From: Negrete, Arthur [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Monday, September 24, 2001 10:45 AM To: NT System Admin Issues Subject: RE: Ideas for firewall I use the Sonicwall pro that would fit your needs and will do vpn also. I have to upgrade to Cisco equipment and will be getting a 515 pix. Check out sonicwall.com Arthur Negrete [EMAIL PROTECTED] -----Original Message----- From: Martijn Eindhoven [ mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Monday, September 24, 2001 1:55 AM To: NT System Admin Issues Subject: Ideas for firewall Hey Guys, I'm looking for a good firewall for about 50 w2k servers. What do you guys think is the best setup, per server or one dedicated firewall. And what is according to you guys the best firewall, i'm thinkin of a stateful one. Met vriendelijke groet, M. Eindhoven W2K System Administrator Bevelander Internet Services B.V. Folkstoneweg 10 1118 LM SCHIPHOL Zuidoost Tel : 020 40 53 900 Fax : 020 40 53 910 http://www.bevelander.nl <http://www.bevelander.nl/> ================================================= This communication contains information which is confidential and may also be privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s), please note that any distribution, copying or use of this communication or the information in it is strictly prohibited. If you have received this communication in error, please notify the sender immediately and then destroy any copies of it. ================================================= http://www.sunbelt-software.com/ntsysadmin_list_charter.htm <http://www.sunbelt-software.com/ntsysadmin_list_charter.htm> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm <http://www.sunbelt-software.com/ntsysadmin_list_charter.htm> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm <http://www.sunbelt-software.com/ntsysadmin_list_charter.htm> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm <http://www.sunbelt-software.com/ntsysadmin_list_charter.htm> Met vriendelijke groet, M. Eindhoven W2K System Administrator Bevelander Internet Services B.V. Folkstoneweg 10 1118 LM SCHIPHOL Zuidoost Tel : 020 40 53 900 Fax : 020 40 53 910 http://www.bevelander.nl <http://www.bevelander.nl/> ================================================= This communication contains information which is confidential and may also be privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s), please note that any distribution, copying or use of this communication or the information in it is strictly prohibited. If you have received this communication in error, please notify the sender immediately and then destroy any copies of it. ================================================= Want to unsub? Do that here: http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmin <http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmin&text_mo de=0&lang=english> &text_mode=0&lang=english Met vriendelijke groet, M. Eindhoven W2K System Administrator Bevelander Internet Services B.V. Folkstoneweg 10 1118 LM SCHIPHOL Zuidoost Tel : 020 40 53 900 Fax : 020 40 53 910 http://www.bevelander.nl <http://www.bevelander.nl/> ================================================= This communication contains information which is confidential and may also be privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s), please note that any distribution, copying or use of this communication or the information in it is strictly prohibited. If you have received this communication in error, please notify the sender immediately and then destroy any copies of it. ================================================= Want to unsub? Do that here: http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmin&text_mod e=0&lang=english Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/ Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/ *************************************************** This e-mail is not an official statement of the Waikato Regional Council unless otherwise stated. Visit our website http://www.ew.govt.nz *************************************************** Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/ Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/ Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/
