|> As for security, well I work for Check Point so I am biased and you
|> asked for a non biased opinion so you can take or leave what I
|> say..Application attacks dominate the internet today. You
|> can not come
|> any where near the level of security that a Check Point firewall can
|> provide if you go with a Cisco PIX. Cisco does not have any
|> application-layer security technologies in any of its devices. Take a
|> look at this article for a 3rd party opinion.
While it is true that Cisco is a plain-vanilla packet filter with no
application-awareness, there is still an option that is NOT checkpoint:
Netscreen. They are cheaper than Checkpoint, they are easier than
Checkpoint, and they come with what they call deep inspection (which is
basically the same as CP's ApplicationIntelligence). Plus, it'S an
appliance, so you get the hardware too.
It's always a matter of what you need. Nothing probably beats the
Checkpoint-Nokia combination in terms of features, flexibility etc. But
especially in smaller environments with a budget, Netscreen is a very very
good alternative.
Stay away from Cisco though if you can. Their PIX is nothing more than
routers with extended filtering capabilities. It might make sense as an
additional layer of security, but not in a stand-alone scenario.
My 2 cents (and I don't work for Netscreen).
Sascha
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
