Firewall Wizards mailing list archives
RE: RE: Firewall-1 platforms
From: "Joe Ippolito" <joe () joesnet com>
Date: Tue, 6 Mar 2001 20:37:24 -0800
Some things that Nokia does do: VRRP (Virtual Router Redundancy Protocol) - HA without additional cost. IPSO OS-level Flow Control, BGP, and a management interface for OS-level stuff and software license and patch-level management. No hardware encryption ...yet -stay tuned. -----Original Message----- From: firewall-wizards-admin () nfr com [mailto:firewall-wizards-admin () nfr com]On Behalf Of Kalat, Andrew (ISS Atlanta) Sent: Tuesday, March 06, 2001 8:28 AM To: 'Smith, Gary (SCOTAM)'; 'firewall-wizards () nfr com' Subject: RE: [fw-wiz] RE: Firewall-1 platforms Hello Gary, Nokia is good platform for FW-1, but there are some things to keep in mind. First, Nokia often lags in patch release. Often, you'll see a few weeks between the time a patch/hotfix/service pack comes out for the Sun version of FW-1 and the Nokia version. Second, Nokia is based on BSD. My understanding (could be wrong) is that Checkpoint is asking all application vendors to now run the Linux version of FW-1. This would mean that conceivably at some point Nokia will have to switch from BSD to Linux. This *is* speculation on my part, but it seems reasonable. Third, Sun is much faster at DES encryption throughput than Nokia (however, Nokia seems to win in raw packet passing speed.) Also, I don't believe the add on cards for encryption acceleration support Nokia yet, but I'm not certain on that... Fourth, with dual Sun boxes, and a good fail over product like StoneBeat, I believe you can do load balancing of traffic between both Sun boxes. As far as I know, you can't do load balancing between two Nokia boxes yet. Just some of my random thoughts and considerations. But, like I said, overall, Nokia is a good platform, depending on your needs. -Andrew Kalat Note: Comments are my own, not my employers, yadda, yadda... -----Original Message----- From: Smith, Gary (SCOTAM) [mailto:gary.smith () ScottishAmicable co uk] Sent: Tuesday, March 06, 2001 5:45 AM To: 'firewall-wizards () nfr com' Subject: [fw-wiz] RE: Firewall-1 platforms David+others: We are looking at putting in two Nokia Firewall-1 appliances with VRRP failover. Aside from cost, can you share any of the potential reasons that you had for discounting Nokia as a platform? --Gary;
-----Original Message----- From: David Lang [mailto:dlang () diginsite com] Sent: Friday, March 02, 2001 4:36 PM To: firewall-wizards () nfr com Subject: [fw-wiz] Firewall-1 platforms I am looking at putting in a couple Firewall-1 boxes and am debating between the various hardware platforms. The Nokia appliances are a distant third choice due to a number of reasons (cost being one of them) but I don't have much info to help me choose between running Firewall-1 on Linux or Solaris
********************************************************************** Information contained herein is the sole responsibility of the Individual sending the message. No responsibility is admitted by Scottish Amicable for any loss or damage incurred through use of the email. In addition, no statement should be construed as giving investment advice within or outside the United Kingdom. An email reply to this address may be subject to interception or monitoring for operational reasons or for lawful business practices. ********************************************************************* _______________________________________________ firewall-wizards mailing list firewall-wizards () nfr com http://www.nfr.com/mailman/listinfo/firewall-wizards _______________________________________________ firewall-wizards mailing list firewall-wizards () nfr com http://www.nfr.com/mailman/listinfo/firewall-wizards _______________________________________________ firewall-wizards mailing list firewall-wizards () nfr com http://www.nfr.com/mailman/listinfo/firewall-wizards
Current thread:
- Firewall-1 platforms David Lang (Mar 04)
- <Possible follow-ups>
- RE: Firewall-1 platforms Kalat, Andrew (ISS Atlanta) (Mar 05)
- Re: Firewall-1 platforms Darren Reed (Mar 05)
- Re: Firewall-1 platforms Shaun Moran (Mar 06)
- Re: Firewall-1 platforms Darren Reed (Mar 05)
- RE: Firewall-1 platforms Smith, Gary (SCOTAM) (Mar 06)
- Re: RE: Firewall-1 platforms David Lang (Mar 07)
- RE: RE: Firewall-1 platforms Kalat, Andrew (ISS Atlanta) (Mar 06)
- Re: RE: Firewall-1 platforms Darren Reed (Mar 07)
- Re: RE: Firewall-1 platforms shawn . moyer (Mar 07)
- RE: RE: Firewall-1 platforms Joe Ippolito (Mar 07)
- RE: RE: Firewall-1 platforms Chuck Fasching (Mar 07)
- RE: RE: Firewall-1 platforms Kalat, Andrew (ISS Atlanta) (Mar 07)
- Re: RE: Firewall-1 platforms shawn . moyer (Mar 07)
- Re: RE: Firewall-1 platforms Barney Wolff (Mar 09)
- Re: RE: Firewall-1 platforms shawn . moyer (Mar 09)
- Re: RE: Firewall-1 platforms Barney Wolff (Mar 09)
- Re: RE: Firewall-1 platforms shawn . moyer (Mar 09)
- Re: RE: Firewall-1 platforms Barney Wolff (Mar 09)
- Message not available
- Re: Firewall-1 platforms (end of thread, I hope.) shawn . moyer (Mar 09)
- Re: RE: Firewall-1 platforms shawn . moyer (Mar 07)
- Re: RE: Firewall-1 platforms hermit1 (Mar 10)