RE: COmpare Firewalls

["Joe Ippolito" <joe () joesnet com>]

Can't help you there since I think MS Proxy is a very cost effective and
easy to manage firewall solution.  If you don't need an easily configurable
DMZ and the use of ICMP, it works great.  It is quite secure with the packet
filtering enabled and the latest service pack and hot fixes.  If all you
need is port address translation and you want to manage (and monitor) your
user's access to the Internet with NT account permissions and save on
bandwidth with the http cache, MS Proxy is certainly the most cost-effective
solution available.

However, if you are a large organization, need a functional DMZ, have
varying inbound access needs, need the use of ICMP, and can afford the 20
times or greater cost, get a copy of Check Point's Firewall-1.  In other
words, it is more a question of functionality verses cost.

-----Original Message-----
From: owner-firewall-wizards () lists nfr net
[mailto:owner-firewall-wizards () lists nfr net]On Behalf Of TUDOR
PANAITESCU
Sent: Wednesday, September 01, 1999 6:14 AM
To: firewall-wizards () nfr net
Subject: COmpare Firewalls


Hello everybody !

I am trying to convince the people in the IT dept. here that they should get
rid of the Microsoft Proxy which is now the only "buffer" between our
network
(192.168.*) and the internet and to get a firewall.

My questions are: 1. Can anybody point me to a site with some information
about the poor reliability/security/etc. of M$ Proxy? 2. Can anybody point
me
to a site where I can find information on different firewalls in order to
compare and (try to) choose the right one? and 3. I'm trying also to promote
LINUX (RH6.0 with ipchains) as a temporary solution; can anybody point me to
a
site where I can find "tons" of information (especially advantages) of using
LINUX ? ( success stories, important companies using LINUX as a firewall
etc...).

Thanks in advance and best regards,
Tudor

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1