Re: Ports 256,257,258 open on FW-1

[jgalvin () cs loyola edu]

> As for me, I thought the Diligence advisory was great.  A major problem
> with  most firewall product marketing is
> the assertion by the producers that their software is easy to use and
> configure, and works "right-out-of-the-box".
        Well, if that advisory was correct, then I am really looking
        forward to the next advisory concerning the entire operating 
        system NT and all its default settings when it comes out-of-box.

        I don't believe Checkpoint advertises Firewall-1 to be out of box.
        Not to mention the fact that there are lots of links on their
        site that point to training and resources.  


> Now, Checkpoint has a "certification" program for training administrators
> ... which some other vendors don't.  But I'm delighted to see anything
> which raises public awareness about the difficulties of fw configuration,
> installation, maintenance, and monitoring.
        
        Well, in my opinion, Checkpoint Firewall-1 is one of the easiest
        solutions to manage, but it certainly does take training to do it.  
        What would really be nice is if "IT professionals" would realize
        that putting a firewall in front of their entire LAN is not going
        to be an easy task.  

        If I were to put up a dam somewhere on the 
        Missippi, you'd better believe that it would take more than myself
        and a few engineering manuals to do it ;-)

Regards,
Jenn