RE: High Speed Firewalls

["Burden, James" <JBurden () caiso com>]

Henry,

We are currently testing :
* StorageTek http://www.network.com, Atlas firewall that works on OC-3 (ATM)
and they are currently working on OC-12.  
* Netscreen http://www.netscreen.com, has a Netscreen 1000 that does
GigEthernet.
* Nokia (FW-1) is suppose to have a GigE interface that we are going to
test.  

We have not finished completed testing, so I cannot give any information.
Also, I do not know your full requirements (i.e., if you care about how
management is done, what type of environment you are running, etc).  You may
be able to setup the network to have multiple paths on an ATM layer or Layer
2 so that you could use multiple firewalls to aggregate your required
bandwidth.

Hope this helps,
Jim


James L. Burden, Security Engineer and Architect
California Independent System Operator
Phone: 916.351.2243 http://www.caiso.com
41DF 0E4C 26E0 2FD3 8C81  A260 5C40 280E B4AE 7420
_____________________________________
  Know yourself, Know your enemy
     in a hundred battles you will never be in danger,
  Know the ground, Know the weather,
     and your victory will be total.    - Sun Tzu 
_____________________________________              

-----Original Message-----
From: Henry Baez [mailto:hbaez () eos hitc com]
Sent: Wednesday, March 01, 2000 7:51 AM
To: firewall-wizards () nfr net
Subject: High Speed Firewalls


I am doing research on very high speed firewalls.  I mean firewalls that
are right now available that could handle OC3 and higher speeds via Gig
Byte Etherenet cards.  In searching the recent posting of this list and
a lot of general web searching, I have found only one firewall that
claims they can do so.  It is call POTUS from a company called Livermore
Software Laboratories.  I would very much like to find at lease another
vendor which at lease matches the claim of PORTUS, 300 MB plus through
put.  Management, bless them, likes to have choices, I would like to
present more then one vendor if possiable.

I have experiences with two commercial firewalls, Checkpoint and
Gauntlet, and one freeware firewall, Ipfilter.  But the links where way
under 10 Meg Byte.  None of the firewalls I have work on 'claim' the
speeds I am looking for.  All the magazines 'test/reviews' I have looked
at top out at about 150 Meg. Byte.  The number of users for this project
would not be large, but each one would be moving Gig Byte size files
across the world.


Thanks,

Henry Baez
hbaez () eos hitc com