[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Using Nokia IP650 as Enterprise firewall??
As for the StoneBeat solution, StoneBeat offers and excellent HA solution. The only problem in this environment is that StoneBeat is not supported for the Nokia platform. You would need to remain with Sun to use the StoneBeat product. If you are interested in StoneBeat and need more information, let me know and I would be happy to provide it. Rick McMaster Sr. Network Security Engineer ePlus Technology http://www.eplus.com Nasdaq: PLUS -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Tuesday, January 23, 2001 5:49 PM To: Raymond N Cc: [email protected] Subject: Re: [FW1] Using Nokia IP650 as Enterprise firewall?? Raymond: The Nokia IP650 will definitely handle your load. The IP440 should also be able to handle your load but am not as familiar with the specs on this machine (as we use a pair of Nokia IP650s here). On each of our Nokia IP650s we have 256MB of memory and a PII processor (448MHz). The IP650s will definitely be able to handle your load and then some. As far as VRRP is concerned.... VRRP was developed by Nokia and as far as I know is only implemented on Nokia equipment. It could be possible that it will work on other platforms but I do not currently know of any yet and I have never heard of anyone implementing it on Sun equipment. As far as an HA environment in regards to Sun equipment is concerned I have heard quite a few people use the Stonebeat Full Cluster product line. But as I have never used this product I am not very familiar with it. Maybe someone from this list could comment? As far as a CheckPoint HA setup, since v4.1 SP2? CheckPoint has encorporated some HA functionality into there code but I have not taken a look at it. Since we use VRRP here I have not really looked into this. Now, my opinion is rather biased but the Nokia platforms are a very solid box. They are very easy to set up out of the box and are a very solid/stable platform. Since you are familiar with Unix (being that your current machine is an Ultra-2 running Solaris 2.x) the jump to a Nokia platform running IPSO (based on FreeBSD) would be rather minor. We basically made the jump that you are thinking about now a couple of years back and the jump was NOT as traumatic as we had originally anticipated. Let me know if you would like more input. Raymond N <[email protected]> on 01/23/2001 02:32:00 PM To: [email protected] cc: (bcc: James E Clukey/Rush/RSH) Subject [FW1] Using Nokia IP650 as Enterprise : firewall?? Hi there, We are currently using Firewall-1 on a Sun Ultra 2 machine. We have about 2000 workstations and servers behind it. During the peak period of the day, we have about 1000 to 1500 connection in the Firewall-1 's Active session table. We use both static NAT and hide NAT. So far, the firewall machine is doing well and we doesn't notice any load problem. Now, my question is if you think the Nokia IP650 (or the IP440) would have sufficient (CPU, memory, etc.) capacity to replace the Sun Ultra 2 and handle the current load? Better? Another question is if the VRRP is only available for the Nokia setup, and not for the Sun Ultra 2 machine? I guess my question is if the Checkpoint VRRP solution are built at the Firewall-1 software or at the hardware (Nokia) platform. Thanks in advance. -raymond ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|