Re: Next Generation Firewalls

["Miller, Richard H" <rick () BCM EDU>]

One consideration is to look at your bandwidth requirements 3 to 5 years down the road. When we were looking we looked 
at PaloAlto but at the time it did not have
the throughput we were looking for (it was prior to the current chassis configuration) and also could not be expanded. 
Both PaloAlto and Juniper appear to be able to
support high bandwidths (PAN can do 120 GB and Juniper can now hit 2 TB). Checkpoint also has finally delivered a 
product that also competes in this arena.
As you get to the point of 100GB connectivity to the outside world and start transferring  beyond 10GB you probably 
need to make sure your firewall can be easily expanded.

Richard H. Miller, CISSP, IEEE(SM)
Network Security Architect
OIT-Network Engineering & Security
Office of Information Technology - Baylor College of Medicine



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Alexandre Adao
Sent: Thursday, June 18, 2015 10:12 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Next Generation Firewalls

Hello Everyone,

​​
We are in the process to acquire a NGFW.  During my evaluation, Checkpoint and PaloAlto have demonstrated a good 
solution. Just keep in mind that in all NGFW  specially if you enable SSL decryption, it will have some impact on 
performance. You may need a separate box for Web Application Filter to off load the firewall performance.

--Alex Adao


On Thu, Jun 18, 2015 at 10:00 AM, Carroll, Tim <Carrolltd () roanestate edu<mailto:Carrolltd () roanestate edu>> wrote:
All,

Roane State Community College is in the process of reviewing next generation firewalls.  Since this is a significant 
investment, I would be interested in hearing from the community what you are using, your experience, why you made the 
choice and your satisfaction with the vendor chosen.

Thanks in advance for any feedback.

Regards,

Tim Carroll
Assistant Vice President and Chief Information Officer
Information Technology
Roane State Community College

________________________________

This email is intended for the addressee and may contain privileged information. If you are not the addressee, you are 
not permitted to use or copy this email or its attachments nor may you disclose the same to any third party. If this 
has been sent to you in error, please delete the email and notify us by replying to this email immediately.



--
========================================
Alexandre Magno Adão
Morgan State University - CGW 300k
Network Services Manager
Planning & Information Technology
443-443-885-4415 Office
443-803-3154 Cell
[http://www.morgan.edu/images/shared/logo-header.gif]<http://www.morgan.edu>