Back when I used to work for a decent sized insurance company (who used
checkpoint on the nokia boxes) I used to push ipf (as far as I know pf
was not around) and many other open source projects as a cost savings
feature to M$ and other commercial products. The answer I always got
from the management is that they don't want to use open source because
there is no real tangible entity that they can point the finger at if
something goes wrong. They also said that "in large enterprise there
is a need to have a responsible party" for software and hardware. They
also claimed that it was substantially more expensive to hire a unix
admin than to hire and or train a windows / GUI admin. This was back
in the mid to late 90's, so take it with a grain of salt.
nb
On Sep 20, 2004, at 1:59 PM, M Raju wrote:
I have always stressed to Clients the ease of configuration,
management, of course the security of OpenBSD, combined with the power
PF beats PIX and CP out the water. Although some hardcore commerical
junkies are simply in self-denial or maybe job security?:-)
_Raju
On Mon, 20 Sep 2004 14:29:05 -0400 (EDT), Rick Aliwalas <[EMAIL PROTECTED]>
wrote:
On Mon, 20 Sep 2004, M Raju wrote:
I have been having trouble convincing some suits aka Management for a
1500+ employee company to migrate from Checkpoint to PF. Taking into
fact that the company is the process of "debt-restructuring" aka
chapter 11, cost-cutting is vital for all IT needs. Hence, I am
putting in a case switch to PF.
Anyone running OpenBSD PF as the primary firewall for large mid-large
orgranizations? If so what type of hardware, setup, etc. Just
curious..
The company I work for has many FreeBSD/OpenBSD servers in production.
Last July, we went live with our first OpenBSD/CARP firewall pair. I
installed a late snapshot of 3.5 on a pair of Dell 1750's and it went
without a hitch. I'm currently building 3 more pairs for another
project.
I feel your pain. We run a big portion of our infrastructure on BSD
and always have to defend it. In your justification, be sure to
highlight the merits of OpenBSD/pf. No one uses OpenBSD because it
is free. They use it because it works. In terms of stability,
flexibility, security, ease of administration and management it works
far better than our PIX's and Checkpoints - at least in our
environment.
-rick
--
May the packets be with you.
