right now i'm using r60 and if nothing of interest comes shipped with r65 i
think I'll just wait for the next major release of cp fw.
I was at a CP conference recently where no NDA was required and no mention
of implied confidentiality was made. If I can remember what they said about
R65:
Bridge mode (I asked whether this would replace InterSpect and got some
waffling)
New features are provided by a "plug-in" instead of having to do a version
upgrade. This is a huge improvement for me.
SSL termination on the firewall external interface so the traffic can be
inspected by SmartDefense instead of having to be passed directly to the web
server.
Ability to manage Connectra completely from the SmartCenter, just like an
enforcement module, not just read the logs and push SmartDefense updates to
it.
Significantly improved VoIP handling with regard to NAT.
URL filtering via a subscription service (to categorize the sites for
reporting)
I'm sure there were other things mentioned as well, but I don't recall now.
The presentation made me think I will definitely become an early adopter of
R65. I think R61 & R62 will become obsolete, kind of like R55W did, and that
R60 & R65 will be the dominant releases. (this is a personal opinion)
Oh, and back to the topic at hand, I'd just do R60 HFA05 unless the other
features of R61/R62 are needed, like Connectra log consolidation or
different SmartDefense profiles for each gateway.
R62 = R61 HFA01 = R60 HFA04 as far as hotfixes are concerned. I think R60
HFA05 had just under 100 fixes in it, but none of them looked like
show-stopper fixes for me.
Ray
_________________________________________________________________
The average US Credit Score is 675. The cost to see yours: $0 by Experian.
http://www.freecreditreport.com/pm/default.aspx?sc=660600&bcd=EMAILFOOTERAVERAGE
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
