It depends on your needs. We were looking to replace a five year old Check
Point v4.0 SP1 system on a Sun Ultra 2 and evauated PIX as well as Check
Point. The costs worked out to a wash. PIX was cheaper for the firewall, but
lacked a VPN client that would handle split DNS and dynamic DNS. This
required a Cisco 3030 Concentrator. The PIX VPN client had a simple version
of ZoneAlarm built in to it, but we wanted a remotely configurable and
reportable personal firewall system. This required a third-party solution.
PIX: $10,000
Concentrator: $15,000
500 licenses of ZoneAlarm Integrity @ $60 apiece: $30,000
Cisco/ZoneAlarm total: $55,000 on two vendors and at least three boxes.
If we already would have had a VPN system, the mileage would have been
different. Personally I consider the Office Mode and Secure Configuration
Verification components of SecureClient to be wonderful. I am pretty much
assured of what device is connecting to my network. The built-in certificate
authority is another plus.
We went with a Nokia IP530 and the costs were even. Nokia's support of both
the hardware and Firewall-1 is superb. If Nokia can't handle it, they bump
it up to Check Point on your behalf.
We eliminated three dial-up systems and use iPass & SecureClient as the
single remote access solution. Our employees now have broadband and wireless
remote access and the reduction in remote access direct costs alone paid for
the firewall upgrade in seven months, not to mention the greatly enhanced
user experience.
Ray
From: "Marsh, Richard" <RMarsh AT NYSSCPA DOT ORG>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Next version of Checkpoint firewall
Date: Mon, 29 Mar 2004 11:12:33 -0500
It's funny you mention that I am actually trying to build a case to abandon
our current firewall in favor of a PIX 506E. Do you know of any
independent
sites (resources) that make similar recommendations. I would really like
to
see us adopt a PIX but I need a credible and non-biased argument. This
email you sent me will be included, but I fear I need more concrete
(non-biased) opinion to sway the decision maker. Thank you very much for
your candor and response.
-----Original Message-----
From: Covington, Chris [mailto:ccovington AT PLUSONE DOT COM]
Sent: Monday, March 29, 2004 10:18 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] Next version of Checkpoint firewall
I would just go buy a $900 Cisco PIX 506E and be done with it. The
latest Check Point products are going to require new hardware and the
software itself is very expensive. You could look into Check Point /
Nokia appliances also, but they're also going to be very expensive.
Chris
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Marsh,
Richard
Sent: Monday, March 29, 2004 9:32 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Next version of Checkpoint firewall
We have been running Checkpoint FW-1 version 3.0a for at least two
years.
I am looking into upgrading, since we can no longer successfully export
the
logs without choking the server. What are our options? Also if someone
can
give me a ballpark idea on how much the upgrade would cost for a small
network with 25 servers and 85 users. I am attempting to piece together
a
plan for our future, I have not been the firewall manager in the past
(that
employee left) and am not Checkpoint certified. Any help, information
ideas,
you can give would be appreciated. At this point I am just gathering
facts
and getting involved with Checkpoint and a formal quote from a sales
associate would not be in either one of our best interests. Thanks in
advance.
Sincerely,
Rich Marsh
"It is our attitude at the beginning of a difficult task which, more
than
anything else, will affect its successful outcome."
William James
1842-1910
http://plato.stanford.edu/entries/james/
<http://plato.stanford.edu/entries/james/>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar ? get it now!
http://toolbar.msn.com/go/onm00200415ave/direct/01/
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
