Re: [FW1] Hardware??

["Carric Dooley" <carric@FW1-NOSPAMcom2usa.com>]

I know this has been covered about a million times here...

It's and older version of FreeBSD, with all non-essential code torn out.
Ipsilon re-wrote all the routing code in it to support the additional
protocols (IPRG, OSPF, BGP, etc.).

NT?  Not even close...

Yes.  There is a lagtime between when Checkpoint releases a patch/update/new
version  I feel it is an acceptable trade-off when you consider what you are
getting:

- An Intel box that performs as well as (or outperforms) a big multi-cpu
Unix box
- a pre-hardened OS so you don't have to fool with that step, and always
wonder if (what) you forgot to do
- packaged service packs that have been tested at Nokia before being
released (how many times did I see "NT's SP6 blew up my firewall!!!"?)
- Tulip chip based 4-port 10/100 Ethernet NIC's (they rock)
- an OS who's sole purpose is to be a firewall, so it's optimized for packet
forwarding (thus the high speeds)
- a rock solid box... (we did tests at one site doing everything from
turning down the voltage, running drills and hand-held HAM radios around it,
banging on it [literally] and we couldn't kill it under what we considered
would be reasonable conditions in a data-center.. we had to turn the voltage
WAY DOWN before it rebooted, but none of the other stuff seemed to affect
it).

Need I say more??


----- Original Message -----
From: "Carl E. Mankinen" <bandit@zcore.net>
To: "Ryan Morgan" <RyanM@gurunet.com>;
<fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Thursday, September 21, 2000 2:11 PM
Subject: Re: [FW1] Hardware??


>
> Nokia IPSO has nothing to do with Windows NT, it's BSDi based.
> It runs some sort of route-d that supports several routing protocols which
> makes it more desirable than the NT product.
> It is also cost effective when compared to NT when you take all factors
into
> consideration.
> You can get HSSI ports for it as well.
>
> ----- Original Message -----
> From: "Ryan Morgan" <RyanM@gurunet.com>
> To: "'Hartley, Earl'" <ehartley@lehman.com>; "'Lee Hughes'"
> <lee@polestar.co.uk>; "Ryan Morgan" <RyanM@gurunet.com>;
> <fw-1-mailinglist@lists.us.checkpoint.com>
> Sent: Thursday, September 21, 2000 1:26 PM
> Subject: RE: [FW1] Hardware??
>
>
> >
> > Have you run into a lag time when dealing with Checkpoint and Nokia.  I
> have
> > been told there is a time period between a new realease of checkpoint
can
> be
> > used on a Nokia box.  Have you run into this?
> >
> > -----Original Message-----
> > From: Hartley, Earl [mailto:ehartley@lehman.com]
> > Sent: Thursday, September 21, 2000 10:16 AM
> > To: 'Lee Hughes'; 'Ryan Morgan';
> > 'fw-1-mailinglist@lists.us.checkpoint.com'
> > Subject: RE: [FW1] Hardware??
> >
> >
> > Actually, it's an Intel box running (EXTREMELY) stripped-down NT code.
> >
> > W Earl
> > Hartley
> > Sr. Network
> > Engineer
> > Lehman
> > Brothers, Inc.
> >
> > > -----Original Message-----
> > > From: Lee Hughes [SMTP:lee@polestar.co.uk]
> > > Sent: Thursday, September 21, 2000 12:12 PM
> > > To: 'Ryan Morgan'; 'fw-1-mailinglist@lists.us.checkpoint.com'
> > > Subject: RE: [FW1] Hardware??
> > >
> > >
> > > Nokia in the UK, seems expensive 50% more expensive..
> > >
> > > why is that? as for as I can gather it's an copy of firewall-1 running
> on
> > > a
> > > unix machine on a 'black box'????
> > >
> > > is there any reason why I want to go down that route rather than build
> my
> > > own.....I guess you don't need an O/S License...but 50% more
expensive,
> > > perhaps they have firewall supergod working in support, not clueless
> > > muppets...?
> > >
> > > I'd say run with what you know best..and price is always an issue
unless
> > > your
> > > one of the silly .com start up with more money than sense (how bitter
I
> am
> > > these days).
> > > Cheers,
> > > Lee
> > >
> > > -----Original Message-----
> > > From: Ryan Morgan [mailto:RyanM@gurunet.com]
> > > Sent: 21 September 2000 16:29
> > > To: fw-1-mailinglist@lists.us.checkpoint.com
> > > Subject: [FW1] Hardware??
> > >
> > >
> > >
> > > We are looking at implementing either checkpoint VPN1 on a Nokia or
Sun
> > > platform.  Any suggestions or problems with either box?  Thanks for
your
> > > help..
> > >
> > >
> > >
> ==========================================================================
> > > ==
> > > ====
> > >      To unsubscribe from this mailing list, please see the
instructions
> at
> > >                http://www.checkpoint.com/services/mailing.html
> > >
> ==========================================================================
> > > ==
> > > ====
> > >
> > >
> > >
> ==========================================================================
> > > ======
> > >      To unsubscribe from this mailing list, please see the
instructions
> at
> > >                http://www.checkpoint.com/services/mailing.html
> > >
> ==========================================================================
> > > ======
> >
> >
> >
>
============================================================================
> ====
> >      To unsubscribe from this mailing list, please see the instructions
at
> >                http://www.checkpoint.com/services/mailing.html
> >
>
============================================================================
> ====
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================