RE: PIX vs Checkpoint vs Sonicwall vs Netscreen

[Roger Marquis <marquis () roble com>]

David Klein <dklein () netscreen com> wrote:
> I feel inclined to respond, that in such large enterprise/service provider
> environments don't use a $500 Netscreen-5.

  <NOTE FROM A DIGEST READER>  Please take care to trim your
  replies.  We don't really need to read the entire body of the
  message or digest you are replying to (again and again).

  Digest readers in particular have problems with these untrimmed
  replies as we have to page-down through all the cruft to find
  the next message.  </NOTE>

WRT to comparisons, we've read a log of generalities but not many
specifics.  Is there a chart somewhere which lists the relevant
(read: non-marketing) features?  In particular:

  Manageability:
  [] serial console?
  [] telnet/cli interface?
  [] ssh/cli interface?
  [] http/gui interface?
  [] java/gui interface?
  [] syslog support?
  [] configurable log verbosity?
  [] snmp/v2/v3?
  [] tftp backup & upgrade?
  [] text-based configuration file?
  [] multi-firewall management tools?

  Configuration:
  [] ip, tcp, udp, and icmp protocol type filtering?
  [] port-range filtering?
  [] application layer inspection  (activex, javascript, flash, im, ...)?
  [] separate ACLs for incoming and outgoing interfaces?
  [] separate ACLs for all interfaces?
  [] stateful filters?
  [] NAT/PAT/... options?
  [] tcp sequence validation?
  [] IDS support?

  Large Site:
  [] high-bandwidth options?
  [] failover?
  [] load-balancing?
  [] IPSec VPN support?
  [] interoperable IPSec VPN support?

  Support:
  [] searchable online documentation?
  [] newsgroup?
  [] 24*7*365 support?
  [] 2h phone & email support?
  [] free and/or inexpensive OS upgrades?

  Vendor Reliability:
  [] reasonable pricing?
  [] straightforward licensing?
  [] history of profitability?
  [] accounting irregularities?
  [] VC funded?
  [] long-term product support (unlike NA's pgp)?
  [] history of vulnerabilities?
  [] timely bug fixes?

  ...

-- 
Roger Marquis
Roble Systems Consulting
http://www.roble.com/

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards