Firewall Wizards mailing list archives
RE: Proverbial appliance vs software based firewall
From: "Ryan, Kennedy" <Kennedy.Ryan () viacom com>
Date: Thu, 17 Oct 2002 15:57:31 -0400
Funny thing.. I'm right now looking at a Netscreen commissioned Tolly Group test report from March 2002, (no.202121) which amazingly (not) shows Netscreen outperforming Checkpoint/Nokia IP740 and Cisco 545 by leaps and bounds.. -----Original Message----- From: Scot Hartman [mailto:shartman () inflow com] Sent: Thursday, October 17, 2002 2:20 PM To: 'pjklist () ekahuna com'; firewall-wizards () honor icsalabs com Subject: RE: [fw-wiz] Proverbial appliance vs software based firewall "Philip J. Koenig" wrote:
Now Checkpoint has commissioned a test that purports to show their product performs better than "dedicated hardware" from Cisco and Netscreen. I would like to have people's opinion on this test, in part because my observation of Tolly Group test reports is that they're one of these "guns for hire" that never writes a bad review for someone who pays them for one. I just skimmed through it and one thing that stuck out in one of the tests was that they were testing only UDP traffic, which struck me a bit strange because that has to be a small part of typical VPN traffic. http://www.checkpoint.com/products/connect/tollyreport.html
Interesting. Their testing doesn't peer like-vendor devices. In the 3DES VPN Throughput test, while using large, eye-catching graphics, they have the CP and NS show the same performance numbers for larger packets. Reading down into the notes you see that they peered all devices with the Checkpoint box. "DUT (Devices under test) were peered with a Check Point device. The Check Point device may have limited the NetScreen's throughput..." - Ya think? - Maybe? - Could the environment have been designed to account for this? I'm all for competitive results, but I hate rosy pictures that seem to hedge results or bury significant information (test environment, OS/hardware versions, etc.). Scot Hartman _______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards _______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- RE: Proverbial appliance vs software based firewall, (continued)
- RE: Proverbial appliance vs software based firewall bmonkman (Oct 14)
- RE: Proverbial appliance vs software based firewall Ofir Arkin (Oct 14)
- Re: Proverbial appliance vs software based firewall James Maher (Oct 14)
- RE: Proverbial appliance vs software based firewall bmonkman (Oct 15)
- RE: Proverbial appliance vs software based firewall Jared Valentine (Oct 16)
- Re: Proverbial appliance vs software based firewall Philip J. Koenig (Oct 16)
- Re: Proverbial appliance vs software based firewall Gary Flynn (Oct 16)
- Re: Proverbial appliance vs software based firewall Mikael Olsson (Oct 16)
- RE: Re: Proverbial appliance vs software based firewall Stephen Gill (Oct 16)
- RE: Proverbial appliance vs software based firewall Scot Hartman (Oct 17)
- RE: Proverbial appliance vs software based firewall Ryan, Kennedy (Oct 17)
- RE: Proverbial appliance vs software based firewall bmonkman (Oct 14)