I have to, respectively, disagree on the IP350/IP380 model. You can accomplish
just
about everything with the IP440 (minus the VPN acceration card). The IP350/380
has
3DES built-in encryption card. That card does not support AES encryption (the
last
time I touched an IP350 was 6 months ago and I was able to confirm this with
Nokia TAC
in Mountain View). That being said, things might have changed since.
The IP350/380 has a P-III 700Mhz CPU. You can replace the 600Mhz cpu on the
IP440 with
an P-III 850Mhhz. Standard on the IP350/380 is 256MB. You can load 768MB RAM
on the
IP440. The maximum interfaces that the IP350 can support is 8. You can have
up to 12
interfaces on the IP440. One very important note, you can have RAID 1 on the
IP440. That
can not be done with the IP350.
You can upgrade the IP440 to what I've mentioned above at a very "cheap" price
because these are PC components and still have "nokia" support (provided that
you have nokia support) because Nokia's policy is "don't ask don't tell). They
will not ask you where you get that part as long as the box is running ipso and
checkpoint firewall.
I would not go with IP350 until I can squeeze every mileage out of the IP440.
It is still a very
good box. You may not aware of this, but the Cisco Pix firewall and the IP440
have the exact
same chasis.
Thorsten Behrens <thorsten.behrens AT INTEGRALIS DOT COM> wrote:
AES is an excellent replacement for 3DES. I would recommend a pair of IP265
(diskless) or IP260 (with disk), and a SPLAT or Win mgmt station. Check the
throughput on these first; but they should do fine. They got acceleration for
AES-128 and 256 built right in and come with 512MB of RAM standard. I think
these will be my new favorite platforms for small-to-medium business "one mgmt
and two enforcement in HA" cookie cutter installations :).
If you want or need more "oomph", an IP350 with a memory upgrade to 512
(accelerates AES-128, not 256) or an IP380 (up to 1GB, also 128 not 256) would
be your choices.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM]On Behalf Of Sean
Donaghey/HDGH
Sent: Wednesday, February 23, 2005 11:30 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] IP440 Equivalent Replacement?
I need to replace our IP440, with a new firewall, and I am wondering what
would be an equivalent hardware box to replace it running NG-AI R55? Our
current IP440 has the Chrysalis LunaVPN card installed in it for VPN
acceleration, but I am unsure if I need a 3DES accelerator card in the new
one or not. Can AES be a good replacement for 3DES?
Thanks,
Sean P. Donaghey
The information contained in this e-mail message is confidential and
protected by law. The information is intended only for the person or
organization addressed in this e-mail. If you share or copy the
information you may be breaking the law. If you have received this e-mail
by mistake, please notify the sender of the e-mail by the telephone number
listed on this e-mail. Please destroy the original; do not e-mail back
the information or keep the original.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
Please note that:
1. This e-mail may constitute privileged information. If you are not the
intended recipient, you have received this confidential email and any
attachments transmitted with it in error and you must not disclose, copy,
circulate or in any other way use or rely on this information.
2. E-mails to and from the company are monitored for operational reasons and in
accordance with lawful business practices.
3. The contents of this email are those of the individual and do not
necessarily represent the views of the company.
4. The company does not conclude contracts by email and all negotiations are
subject to contract.
5. The company accepts no responsibility once an e-mail and any attachments is
sent.
http://www.integralis.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
---------------------------------
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
