Re: Appliance firewall

[Jian Zhen <jlz () synlab com>]

bnairn () Telenisus com (bnairn () Telenisus com) [001009 18:39]:
> The Nokia is an excellent device and has impressive throughput.  The only

Does anyone have some real world thru-put of the Nokias?

> problem with the Nokia devices, 330, 440, or 650, is that chassis space is
> finite. Once you begin talking about large scale firewalls, you may want to
> use a Sun Enterprise class server, which is more scalable.

What do you plan to expand? As far as I know the 330 has 1 expansion slot,
the 440 has 4, and the 650 has 5. And you can expand to various different
cards like ATM, HSSI, T1 serial w/ CSU/DSU, etc.

The HD is big enough to store days of logs (logs should be moved off-fw 
nitely IMHO).

I see two limitations with Nokias:

1) Number of CPU is limited to a single CPU right now. But given the fact 
   that FW1 is single-threaded, it doesn't make much difference even if you 
   had multiple CPUs.

2) CPU speed is limited to the 3 models. 500Mhz for 330, 600 for 440, and 
   700 for 650. You can't go any higher unless Nokia decides to up them.
   But unless you are running a site that's pushing multiple 100 Mbs, those
   CPU speeds are sufficient. 

just my $.02

// Jian

-- 
Jian L. Zhen
<jlz () synlab com>
wasaaaaaaaaaaaaaaaaaaaaaabi

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards