RE: High Speed Firewalls

["Deane, James" <jdeane () chx com>]

You might want to look at a product called RAINwall by Rainfinity
(www.rainfinity.com).  RAIN stands for Redundant Array of Inexpensive Nodes
(Inexpensive is, I guess, a relative term, especially when Checkpoint
licensing costs get involved.)  They claim that it is a clustering solution
for Checkpoint FW-1 which can scale linearly to any number of firewalled
gateways.  Therefore, in an ideal situation, I guess you could cluster
enough FW-1 boxes to accommodate this much traffic.  
 
HTH,
Jim

Disclaimer:  I'm not affiliated with Rainfinity in any way, we just use it
here to cluster 2 FW-1 boxes.  For us, it pretty much works as advertised
with two boxes.  (We aren't as concerned with performance as we are with
availability, though.) 


-----Original Message-----
From: Henry Baez [mailto:hbaez () eos hitc com]
Sent: Wednesday, March 01, 2000 9:51 AM
To: firewall-wizards () nfr net
Subject: High Speed Firewalls


I am doing research on very high speed firewalls.  I mean firewalls that
are right now available that could handle OC3 and higher speeds via Gig
Byte Etherenet cards.  In searching the recent posting of this list and
a lot of general web searching, I have found only one firewall that
claims they can do so.  It is call POTUS from a company called Livermore
Software Laboratories.  I would very much like to find at lease another
vendor which at lease matches the claim of PORTUS, 300 MB plus through
put.  Management, bless them, likes to have choices, I would like to
present more then one vendor if possiable.

I have experiences with two commercial firewalls, Checkpoint and
Gauntlet, and one freeware firewall, Ipfilter.  But the links where way
under 10 Meg Byte.  None of the firewalls I have work on 'claim' the
speeds I am looking for.  All the magazines 'test/reviews' I have looked
at top out at about 150 Meg. Byte.  The number of users for this project
would not be large, but each one would be moving Gig Byte size files
across the world.


Thanks,

Henry Baez
hbaez () eos hitc com