RE: Firewall recommendations?

["Marendra Nutriaji" <rendi () itpro co id>]

maybe you should consider CYBERGUARD for the firewall. This firewall granted award many awards, such as EAL4, B1. The 
reason why i like this firewall is its ability to fully integrated with Operating system and Application Proxy 
Firewall. Many features more provided by Cyberguard and it's fulfilled your requirements need for you firewall.

cheers

marendra  

-----Original Message-----
From: Mark Kelsay [mailto:mkelsay () Switchboard com]
Sent: Sunday, March 09, 2003 12:42 AM
To: 'rdusek () myway com'; security-basics () securityfocus com
Subject: RE: Firewall recommendations?


I am a big fan of Netscreen, www.netscreen.com.  SonicWall is good also,
www.sonicwall.com.


mark

-----Original Message-----
From: rdusek () myway com [mailto:rdusek () myway com]
Sent: Thursday, March 06, 2003 3:05 PM
To: security-basics () securityfocus com
Subject: Firewall recommendations?




I am in charge of researching a firewall to replace what we currently 

have.  At my previous job I had used Microsoft ISA in a low-security 

environment, and was happy with its features, and its integration with 

the Windows environment there.  However, at my current job, security is a 

much greater concern, and I have to admit, I am somewhat uneasy running a 

Microsoft firewall product on top of a Microsoft OS. We also had 

investigated Checkpoint as well as Cisco Pix, and found that for our 

needs, the Pix at least seemed to need _many_ separate components for the 

same functionality. My question is what are your experiences with using 

ISA from a security standpoint? Usability issues? From the Mac end? Or 

would we be better off pursuing the Checkpoint or the Pix solution? We 

also plan on implementing VPN over whatever we choose, so if you 

recommend something other than these, it should support at least PPTP and 

perhaps eventually IPSec/L2TP.  We have also considered placing ISA 

behind a Linux (or BSD) IP Chains firewall and our perimeter network to 

block some of the traffic from getting to ISA. Any comments here? Thanks 

to everybody in advance!