Make sure you do your homework and math properly to consider the TOTAL costs
of both packages. I did this exercise about two years ago and Check Point
came out the clear winner and even had lower costs. Imagine that, lower than
a Cisco solution.
This may not be accurate today, so make sure you check it yourself.
Remote access and laptop protection were a prime area of interest. Cisco did
not have a remotely manageable personal firewall; you had to buy ZoneAlarm
Integrity at $60 a laptop in a quantity of 500. The price has come down
somewhat since Check Point bought ZoneLabs. Add $30,000 to the price of
using Check Point with SecureClient to get the cost of PIX with Integrity.
PIX would not integrate with Active Directory nor would it support dynamic
DNS or split DNS. We would have had to buy a Cisco 3030 concentrator for
remote access. Add $15,000 to the price of just the PIX box.
I was at a conference just last wek and they did a demo of Check Point with
SmartDefense versus PIX. They used MetaSploit as the attacker. Check Point
out of the box stopped all of the exploits. PIX allowed remote root shells
on the vulnerable web servers.
SmartDefense can buy you more time to get patching tested and deployed. With
people kicking Microsoft exploits out the door within two days of the patch
release, this may be a big concern for your environment.
We're using the built-in QoS product, Floodate-1, to keep from having to add
Internet capacity. We're assuring our VPN links, which replaced frame relay,
are not starved for bandwidth by someone sending in a big honkin' email
attachment from the Internet. We don't let web surfing grab too much and we
keep the IT programmers and support people from killing our capacity by
downloading 300+ MB files.
FWIW,
Ray
--- dhananjoy chowdhury <dhananjoyc AT GMAIL DOT COM> wrote:
> Hi All,
> Does anyone have the convincing advantages of
> Checkpoint R55 over Cisco Pix,
> with respect to VPN ,security and management.
>
> Kindly share.
>
> Thanks,
> Dhananjoy
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
