Firewall-1

Re: [FW-1] Next version of Checkpoint firewall

Subject: Re: [FW-1] Next version of Checkpoint firewall
From: Shoval Tomer <shoval AT SOFTOV.CO DOT IL>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 29 Mar 2004 23:12:45 +0400
Cisco PIX has a very user friendly GUI.

The one thing I can not tolerate about the pix, is the inability to
filter vpn traffic. If you set up a vpn tunnel between two sites, you
can not filter it. It's a bi-directional free for all.

Apart for that, Checkpoint can run on linux and windows 2000, and use as
much network interfaces that the OS allows.
Cisco's High-End pix only supports 8, and costs much more then
checkpoint.

And don't get the low end modules, cause their way to low-end for almost
anything (no DMZ, for instance)



> -----Original Message-----
> From: Hal Dorsman [mailto:hdorsman AT RMEF DOT ORG]
> Sent: Monday, March 29, 2004 8:04 PM
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: Re: [FW-1] Next version of Checkpoint firewall
>
> I have recently been considering going back to a PIX
> myself.  One argument in favor of that would be that
> most of my experiences with Checkpoint support have not
> been good, and believe it has worsened over the last several
> years.  Anyone want to share their feelings on overall
> satisfaction with Checkpoint support?  Combine that with
> their lousy documentation (in comparision I feel Cisco's
> docs are second to none),  and very high price of their
> products and support contracts, those PIX boxes are looking
> better every year.  Does anyone know if Cisco has come
> up with a user friendly GUI yet?
>
> Hal
>
> > -----Original Message-----
> > From: Marsh, Richard [mailto:RMarsh AT NYSSCPA DOT ORG]
> > Sent: Monday, March 29, 2004 9:13 AM
> > To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> > Subject: Re: [FW-1] Next version of Checkpoint firewall
> >
> >
> > It's funny you mention that I am actually trying to build a
> > case to abandon
> > our current firewall in favor of a PIX 506E.  Do you know of
> > any independent
> > sites (resources) that make similar recommendations.  I would
> > really like to
> > see us adopt a PIX but I need a credible and non-biased
> > argument.  This
> > email you sent me will be included, but I fear I need more concrete
> > (non-biased) opinion to sway the decision maker.  Thank you
> > very much for
> > your candor and response.
> >
> > -----Original Message-----
> > From: Covington, Chris [mailto:ccovington AT PLUSONE DOT COM]
> > Sent: Monday, March 29, 2004 10:18 AM
> > To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> > Subject: Re: [FW-1] Next version of Checkpoint firewall
> >
> > I would just go buy a $900 Cisco PIX 506E and be done with it.  The
> > latest Check Point products are going to require new hardware and
the
> > software itself is very expensive.  You could look into Check Point
/
> > Nokia appliances also, but they're also going to be very expensive.
> >
> > Chris
> >
> > -----Original Message-----
> > From: Mailing list for discussion of Firewall-1
> > [mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf
> > Of Marsh,
> > Richard
> > Sent: Monday, March 29, 2004 9:32 AM
> > To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> > Subject: [FW-1] Next version of Checkpoint firewall
> >
> > We have been running Checkpoint FW-1 version 3.0a  for at least two
> > years.
> > I am looking into upgrading, since we can no longer
> > successfully export
> > the
> > logs without choking the server.  What are our options?  Also
> > if someone
> > can
> > give me a ballpark idea on how much the upgrade would cost for a
small
> > network with 25 servers and 85 users.  I am attempting to
> > piece together
> > a
> > plan for our future, I have not been the firewall manager in the
past
> > (that
> > employee left) and am not Checkpoint certified. Any help,
information
> > ideas,
> > you can give would be appreciated.  At this point I am just
gathering
> > facts
> > and getting involved with Checkpoint and a formal quote from a sales
> > associate would not be in either one of our best interests.
> > Thanks in
> > advance.
> >
> >
> >
> > Sincerely,
> >
> >
> >
> > Rich Marsh
> >
> >
> >
> > "It is our attitude at the beginning of a difficult task which, more
> > than
> > anything else, will affect its successful outcome."
> >
> > William James
> > 1842-1910
> >
> > http://plato.stanford.edu/entries/james/
> > <http://plato.stanford.edu/entries/james/>
> >
> >
> >
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner AT ts.checkpoint DOT com
> > =================================================
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner AT ts.checkpoint DOT com
> > =================================================
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner AT ts.checkpoint DOT com
> > =================================================
> >
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner AT softov.co DOT il, and is
> believed to be clean.
> MailScanner thanks transtec Computers for their support.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>