RE: Appliance firewall

[bnairn () Telenisus com]

The PIX appliance is a robust packet filter with embedded code, whereas the
Nokia has a hard drive and runs Checkpoint FW-1 over top a boiled down BSD
kernel.  That's the major difference. The Nokia was probably left out,
because the speaker felt the Nokia wasn't a "true" appliance.  I've fought
this battle before, over the NFR appliance and it's having a hard drive.

The Nokia is an excellent device and has impressive throughput.  The only
problem with the Nokia devices, 330, 440, or 650, is that chassis space is
finite. Once you begin talking about large scale firewalls, you may want to
use a Sun Enterprise class server, which is more scalable.

Last thing to note.  Intrusion.com is emerging with an appliance that looks
really good.  It may cause a war between the likes of Nokia and
Intrusion.com and Checkpoint.

Bryan   

-----Original Message-----
From: Yasmin Wu [mailto:yasminwu () yahoo com]
Sent: Sunday, October 08, 2000 11:54 PM
To: firewall-wizards () nfr net
Subject: [fw-wiz] Appliance firewall


A year or two ago, in the blackhat session, a
gentlement talked about appliance firewall comparison.
CISCO PIX is one of the product compared but Nokia was
not.

When the audience asked why Nokia was not on the list,
the speaker said that it did not meet certain
pre-selection criteria, so it was left out.

As I started to compare PIX and Nokia, it seems that
they are on-par with each other, and actually I think
Nokia may be a bit better because of it is a more
mature product and in terms of failed over, it don't
need a serial cable :-)

Anyone know why the speaker in the blackhat session
believe that Nokia is not good enough ??
In general, anybody has any comment on the Nokia (good
and bad) ??


y

__________________________________________________
Do You Yahoo!?
Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
http://photos.yahoo.com/

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards