Firewall Wizards mailing list archives

Re: Nokia interview questions


From: hesselsp () ashaman dhs org
Date: Wed, 26 Sep 2001 21:42:31 -0400 (EDT)

On Tue, 25 Sep 2001 black () galaxy silvren com wrote:
amounts of data. They do make gigabit interfaces for the Nokia firewalls,
and while I haven't seen any specifics on benchmarking, I don't think the
manufacturer would make an interface for their product if it could not
stand up to the bandwidth reasonably well. You may choose to argue this
point.


Ouch.  I haven't met a vendor that made a product that could stand up to
the bandwidth very well.... except for Juniper.  I guess that ~200mb/s is
reasonable for a gig card. My guess would be the only reason why they came
out with this is because you can buy gig cards for linux and 
solaris.  More of a marketing thing really.  How many free PCI slots on a
nokia?  mb/pci slot might be another reason.

and
On Wed, 26 Sep 2001 Peter Lukas <plukas () oss uswest net> wrote:
You mean you didn't buy CheckPoint's benchmark of the Linux Ferrari, Sun
Oldsmobuick, Nokia Ford Escort and NT Lexus? :-) Of course, they follow
their 250Mbps/3DES nonsense with "ample for most T1's." Of couse, I've
always maintained that folks spend the national defecit building fast
firewalls so they can cram 100GB of traffic up their cocktail straw DS3!
;-)

Well, the way I have always looked at it is, an over powered firewall
will likely have better latencies, less jitter, and less packet loss when
dealing with reasonable speeds.  Then again, I have never done a
"normal" firewall install.  Most people don't care too much about these
things... it seems.  I guess that people don't put firewalls between their
engineers and accounting.... so all you ever deal with is internet
connection.  A T1 or something.  Not Fast Ethernet.... or worse.

I did ask Checkpoint over and over again about which network card they
used in linux... or what rule base they used... I don't remember now if I
ever got an answer.



_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards


Current thread: