Firewall-1

Re: [FW-1] Next version of Checkpoint firewall

Subject: Re: [FW-1] Next version of Checkpoint firewall
From: "Johanns, Gabe" <gjohanns AT FOXRIVERMILLS DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 31 Mar 2004 11:36:51 -0600
> -----Original Message-----
> From: Sascha Picchiantano [mailto:s.pic AT ESPIQUE DOT DE]
> Sent: Wednesday, March 31, 2004 4:34 AM
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: Spam:Re: [FW-1] Next version of Checkpoint firewall
>
> |> As for security,  well I work for Check Point so I am biased and
you
> |> asked for a non biased opinion so you can take or leave what I
> |> say..Application attacks dominate the internet today. You
> |> can not come
> |> any where near the level of security that a Check Point firewall
can
> |> provide if you go with a Cisco PIX. Cisco does not have any
> |> application-layer security technologies in any of its devices. Take
a
> |> look at this article for a 3rd party opinion.
>
> While it is true that Cisco is a plain-vanilla packet filter with no
> application-awareness, there is still an option that is NOT
checkpoint:
> Netscreen. They are cheaper than Checkpoint, they are easier than
> Checkpoint, and they come with what they call deep inspection (which
is
> basically the same as CP's ApplicationIntelligence). Plus, it'S an
> appliance, so you get the hardware too.
>
> It's always a matter of what you need. Nothing probably beats the
> Checkpoint-Nokia combination in terms of features, flexibility etc.
But
> especially in smaller environments with a budget, Netscreen is a very
very
> good alternative.
>
> Stay away from Cisco though if you can. Their PIX is nothing more than
> routers with extended filtering capabilities. It might make sense as
an
> additional layer of security, but not in a stand-alone scenario.
>
> My 2 cents (and I don't work for Netscreen).
>
> Sascha


Has anyone looked at the Symantec Gateway Security 5400 Series? I have
been seeing some good reviews, but I don't trust reviewers' as much as
actual users.

The boxes are appliances (not good or bad, just a note), seem very
feature rich, and Symantec Support has always been top notch for us.

I don't like Cisco for reasons stated above, and I have looked into
Netscreen, and SonicWall. Netscreen seems like a likely alternative, but
I want to cover all my options.

Just wondering,
Gabe

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>