Re: nokia firewalls

[Eric Hall <firewall-wizards () darkart com>]

        Okay, I'll bite <g>.  Have you set them up in a high bandwidth environment
(like multiple DS3s w/ multiple Nokia boxen)?  Or what's the highest sustained
bandwidth you've seen them run under?
        I'm looking at a firewall for multiple DS3s (probably 4), expecting to use
multiple boxen of whatever flavor works right/the best/etc.  I like the
single-box idea of the Nokias, but am yet to be convinced they can handle both
the bandwidth (in a bits/sec way) and the connection rate (connections/sec) and
keep it all in sync.


                Thanks much,


                -eric


At 11:48 -0400 7/16/99, Carric Dooley wrote:
> Ahhh... my favorite.  =)
>
> The Nokia firewalls are awesome.  I have been playing with a pair if
> IP440's (anticipating the arrival of my 650's), and I am thoroughly
> impressed.  Fail-over works like a dream.  If a firewall fails while a
> user is ftp'ing a big file, I bet he/she would not even notice.  It's that
> quick.
>
> Since Checkpoint and Nokia (really Ipsilon) worked together to develop it,
> the FW code and the OS are perfectly integrated.
>
> Load balancing and fail-over like I said are extremely nice.
>
> As far as Nokia and Checkpoint getting along, I know there have been some
> recent commitments on Checkpoint's part to start getting the code updates
> to Nokia sooner so updates to releases can occur closer to the same time
> for all platforms.
>
> My tech support rules (<flagrant_plug>thanks to the guys/gals at SecureIT
> [a division of Verisign] and Glenn from Nokia. You should buy only from
> them</flagrant_plug>).  In all honesty, I have not had a problem they
> could not fix promptly.
>
> If you need any further opinions or plugs about the nokia boxes, feel free
> to contact me.  I am their poster boy.  =)  hehehe...  I have assisted
> with implementations at two extremely high profile sites and will continue
> to recommend the Nokia solution as: "the solution that provides all the
> throughput of a high-end UNIX with none of the administrative overhead".
> These fit perfectly into any environment whether it's a Sun shop, HP-UX,
> NT, Novell.. whatever.  You will see more and more of this "network
> device" approach to firewalling, proxying and intrusion detection as time
> goes on.  For examples look at Nokia's firewall, Novells new Border
> Manager boxes, and NFR's current IDS solution. It's the wave of the
> future.  =)
>
> Carric Dooley
> COM2:Interactive Media
> http://www.com2usa.com
>
> On Thu, 15 Jul 1999, Neil Lehrer wrote:
>
> > hi,
> >
> > i am soliciting opinions on the nokia ip series firewalls.
> >
> > how well do they work?
> > is fw-1 well integrated?
> > does the load balancing work?
> > do nokia and checkpoint corporate get along?
> > how is tech support?
> >
> > anything else you would like to contribute.
> >
> > thanks
> >
> >
> >
> > --
> >
> >
> > regards
> >
> > +++++++++++++++++++++++++++++++++++++++++++++++
> > + Neil Lehrer
> > +
> > + International Broadcasting Bureau
> > + System Development Division
> > +
> > + voice    202 619-2524
> > + fax      202 619-3576
> > + nlehrer () ibb gov
> > +
> > + " is this crisis an opportunity or just
> > +   another grab the fire extinguisher moment?"
> > +
> > ++++++++++++++++++++++++++++++++++++++++++++++++