RE: Nokia/Checkpoint firewall

["Yin To Chu" <ytchu () ozemail com au>]

Kyle:

Can you tell the hardware configuration of the Ultra 250, i.e. memory, no.
of CPU and CPU speed?
There is only a Pentium II 450 CPU running FreeBSD 4.0 (optimized by Nokia)
in IP650. I read the spec. on Nokia GGSN (GPRS core element) which is IP650.

We got HA Ultra 450 server pair running FW-1 and StoneBeat? May save a lot
of money and space if Nokia box is that fast. Suppose the HA module works on
Checkpoint 2000.

I hope the cPCI ZNYX 4-port NIC for IP650 can do host based HA networking
with FreeBSD RAINLink driver. www.znyx.com. I am not sure.

Yinto

-----Original Message-----
From: owner-firewall-wizards () lists nfr net
[mailto:owner-firewall-wizards () lists nfr net]On Behalf Of Starkey, Kyle
Sent: Tuesday, 1 February 2000 15:11
To: Wang, Daniel; firewall-wizards () nfr net; donwang () angstrommicro com
Subject: RE: Nokia/Checkpoint firewall


Daniel,
I don't now about the specifics of the hardware inside the Nokia's, but we
bought IP650 and replaced SUN E250's.  We saw 3 times the packets being
processed on the Nokia's running the SAME rule set.  I would say that the
slimlined, BSB kernal is well tuned to inspect and forward packets.  This
was out of the box and I believe with a bit of policy tuning I can see a 4x
multiplier on the Nokias.

-Kyle
InfoSec
MSDW Online

-----Original Message-----
From: Wang, Daniel [mailto:daniel_wang () tds com]
Sent: Tuesday, January 25, 2000 9:41 AM
To: firewall-wizards () nfr net; donwang () angstrommicro com
Subject: RE: Nokia/Checkpoint firewall


I didn't work with it myself much, but when we tried them here the power
supplies failed at an alarming rate. We had two replaced under warranty in
the just the short time we were using it.

I don't know about performance under high load, but FYI the hardware is a
standard ATX PC motherboard with a P2-300 processor, and the OS is a
modified version of FreeBSD. You could expect about the same performance as
the equivalent PC.

-----Original Message-----
From: don Wang [mailto:donwang () uac com]
Sent: Wednesday, January 19, 2000 12:50 PM
To: firewall-wizards () nfr net; donwang () angstrommicro com
Subject: Nokia/Checkpoint firewall


Hi,

Does anyone have any comments about the Nokia firewall solution which
uses Checkpoint?  I have looked at the Nokia web site and want to hear
any field stories that are available.

Thanks,
Don