While all you say is probably true it seems to be a fact that these ASA
boxes are eating market share from CheckPoint these days. There are
policy converters available for those who switch. I have no personal
experience with these ASA boxes, but I have discussed a bit around the
topic with our local CCIE contact. He's always bragging of how many
CheckPoint customers he has converted lately. From what I have found
from this is that if you have a fairly uncomplex STATIC environment, ASA
will probably be a killer. With some more advanced rule sets (that is
also readable) CheckPoint is still state of the art.
The cost of an ASA box is less than the annual Checkpoint software
subscription so I guess CheckPoint should take at least *some* notice of
this.
And yes, I have met some awful rule bases both on CheckPoint and on Pix,
but the obfuscation that >1000 lines of conduits gives you, will make
you cry.
Lars
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf
> Of cisco4ng
> Sent: 22. november 2006 21:32
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: Re: [FW-1] Checkpoint vs. Cisco ASA
>
> ASA-5520 is about the same as the Pix525 except you can run IPS and
> webVPN on the box. In term of performance, they are almost
> the same.
>
> You should tell your director to stop listening to Cisco
> SEs and actually
> do his own research. If he does that, he will know that a
> lot of the ASA
> stuffs are just hyped. If you take way the IPS module
> (optional) and
> one other thing on the ASA, Pix525 and ASA5520 are exactly the same
> because they run exactly the same 7.x buggy code.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
