Firewall Wizards mailing list archives

Re: Nokia/Checkpoint firewall


From: Jerald Josephs <jerald.josephs () iprg nokia com>
Date: Fri, 04 Feb 2000 21:02:17 -0800

IPSO is based upon FreeBSD 2.2.6.
All known security issues in FreeBSD have been incorporated into IPSO
as we have become aware of them.

Whereas FreeBSD is an effort supported by contributions from many sources,
IPSO development is a concerted effort under the focused attention of a group
of engineers that include some who have been involved in UNIX development
since the beginning of UNIX.

I respect your concern, Josef, however, IPSO is MORE SECURE than any
implementation of FreeBSD that you can obtain.

You suggest that Nokia is not competent when it comes to OS development
because you assume that the Security Platforms are engineered by those who
are responsible for other Nokia products, such as mobile phones.  Perhaps you
don't recall that Nokia acquired Ipsilon Networks in 1997 and the IP in IP650
means Ipsilon. The Nokia Security Platform continues to be developed under
the direct supervision of the original core group that made up Ipsilon Networks.

I am one of them.

Sincerely,

--- Jerald Josephs

Josef Pojsl wrote:

On Wed, Feb 02, 2000 at 09:55:51PM +1100, Yin To Chu wrote:
Kyle :

Can you tell the hardware configuration of the Ultra 250, i.e. memory, no.
of CPU and CPU speed?
There is only a Pentium II 450 CPU running FreeBSD 4.0 (optimized by Nokia)
in IP650. I read the spec. on Nokia GGSN (GPRS core element) which is IP650.

Hello,

are you sure they are using FreeBSD _4.0_? It has not been released,
and even if it had, it is generally not a Good Thing to run such
a critical application as firewall on an X.0 OS version. It took some
time for FreeBSD 3.X to settle down.

I generally don't trust companies optimizing others'
operating systems. IMHO, the FreeBSD project do their job very well.
A shoemaker should be making shoes and a tailor should be making clothes.

Regards,
Josef

--
Josef Pojsl                           mailto:josef.pojsl () skynet cz
SkyNet, a.s.                                  NAI Security Partner
Czech Republic                               http://www.skynet.cz/
PGP fingerprint: 23CB DE28 51A9 53F1 0C1F 67EF B3ED 8435 9D1B C7C8

Attachment: jerald.josephs.vcf
Description: Card for Jerald Josephs


Current thread: