Security Basics mailing list archives
RE: firewall and pack shape for 10G
From: Dan Guinn <dan.guinn () eodt com>
Date: Thu, 10 Jan 2008 07:54:41 -0500
My suggestion would be to get an appliance, such as Crossbeam, that can handle 10GB throughput with your existing Check Point gateway. No reason to reinvent the wheel...just upgrade the hardware to make the speed. Per their data sheets, they can handle up to 40GBit of Check Point traffic on the X-Series chassis. http://www.crossbeamsys.com/files/Xchassis_103107.pdf Good luck! Dan Guinn -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Nick Sent: Wednesday, January 09, 2008 11:32 AM To: u.bodalina () gmail com Cc: security-basics () securityfocus com Subject: Re: firewall and pack shape for 10G u.bodalina () gmail com wrote:
Hi All, Our current Gateway Firewall (Checkpoint) and packet shaper can handle 1Gbps. Soon our national bandwidth will be increased from 5Mbps to 10Gbps. What solutions are there interms of firewalling and pack shaping for 10G pipes? Are there any commercial firewalls and packet shapers that can handle this traffic? Or would we have to use a custom configured Linux box? We were told to get rid of our gateway firewall and use BSD firewalls in front of the critical servers. Should we even consider this option? Thanks in advance.
I am not handling that sort of traffic with mine, but clavister (www.clavister.com) is worth looking into. They have machines which claim to handle up to 16 Gbps.. Nick
Current thread:
- firewall and pack shape for 10G u . bodalina (Jan 09)
- Re: firewall and pack shape for 10G Pedro Gonzalez (Jan 09)
- Re: firewall and pack shape for 10G Nick (Jan 09)
- RE: firewall and pack shape for 10G Nhon Yeung (Jan 10)
- RE: firewall and pack shape for 10G jmacaranas (Jan 10)
- RE: firewall and pack shape for 10G Dan Guinn (Jan 10)
- RE: firewall and pack shape for 10G Nhon Yeung (Jan 10)
- Re: firewall and pack shape for 10G Andrea Gatta (Jan 09)