Security Basics mailing list archives

RE: firewall and pack shape for 10G


From: "Nhon Yeung" <Nhon.Yeung () cranegroup com au>
Date: Thu, 10 Jan 2008 10:42:22 +1100

For the firewalls you might want to find out how any of the recommended
systems handle smaller packet sizes as they typically don't market these
rates. Also you'd want to take a guess at what the expected load is with
the increase to make sure that the box can handle all the features you
require.. nothing worse than getting hardware that's underspec'ed.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Nick
Sent: Thursday, 10 January 2008 3:32 AM
To: u.bodalina () gmail com
Cc: security-basics () securityfocus com
Subject: Re: firewall and pack shape for 10G

u.bodalina () gmail com wrote:
Hi All,
Our current Gateway Firewall (Checkpoint) and packet shaper can handle
1Gbps. Soon our national bandwidth will be increased from 5Mbps to
10Gbps.   What solutions are there interms of firewalling and pack
shaping for 10G pipes? 
Are there any commercial firewalls and packet shapers that can handle
this traffic?
Or would we have to use a custom configured Linux box?
We were told to get rid of our gateway firewall and use BSD firewalls
in front of the critical servers. Should we even consider this option?

Thanks in advance.



Any views expressed in this message are those of the individual sender, except where the sender specifically states 
them to be the views of Crane Group


Current thread: