RE: High Speed Firewalls

["Dippold, John" <John.Dippold () fmr com>]

        I'm no expert but we have been looking at similar 
        requirements. It all depends on what you call
        a firewall. You can use ACL's on a router at that speed.
        There are also several switching products that have 
        filtering. They include Alteon and Arrowpoint. Netscreen
        is pretty fast but I haven't had a crack at their new Gig 
        support. I wouldn't waste time on PIX if you're looking for speed.
        Also, BigIP has ported IP Filter to their platform and they have
        Gig support. My benchmarks show them topping out at 320 Mbs
        but that varies with packet size.
                I have never heard of POTUS but I will take a look,
        although the name "POTUS" does not inspire thoughts
        of high performance ;)

                                -jsd

> -----Original Message-----
> From: Henry Baez [mailto:hbaez () eos hitc com]
> Sent: Wednesday, March 01, 2000 10:51 AM
> To: firewall-wizards () nfr net
> Subject: High Speed Firewalls
>
>
> I am doing research on very high speed firewalls.  I mean 
> firewalls that
> are right now available that could handle OC3 and higher 
> speeds via Gig
> Byte Etherenet cards.  In searching the recent posting of 
> this list and
> a lot of general web searching, I have found only one firewall that
> claims they can do so.  It is call POTUS from a company 
> called Livermore
> Software Laboratories.  I would very much like to find at 
> lease another
> vendor which at lease matches the claim of PORTUS, 300 MB plus through
> put.  Management, bless them, likes to have choices, I would like to
> present more then one vendor if possiable.
>
> I have experiences with two commercial firewalls, Checkpoint and
> Gauntlet, and one freeware firewall, Ipfilter.  But the links 
> where way
> under 10 Meg Byte.  None of the firewalls I have work on 'claim' the
> speeds I am looking for.  All the magazines 'test/reviews' I 
> have looked
> at top out at about 150 Meg. Byte.  The number of users for 
> this project
> would not be large, but each one would be moving Gig Byte size files
> across the world.
>
>
> Thanks,
>
> Henry Baez
> hbaez () eos hitc com