NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Using Nokia IP650 as Enterprise firewall??



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Stonebeat has HA and Full Cluster.

With the Nokias you would need to use a load balancer sandwich
configuration to acheive clustering (that could be the solution regardless
of platform even giving you the ability to use multiple platforms if you
so desired).


Carric Dooley
Senior Consultant
COM2:Interactive Media

"But this one goes to eleven."
- -- Nigel Tufnel


On Wed, 24 Jan 2001, Raymond N wrote:

> 
> Thanks for your response.  Does StoneBeat offer load balancing also?
> 
> -raymond
> 
> At 09:34 PM 1/23/01 -0500, you wrote:
> >As for the StoneBeat solution, StoneBeat offers and excellent HA solution.
> >The only problem in this environment is that StoneBeat is not supported for
> >the Nokia platform.  You would need to remain with Sun to use the StoneBeat
> >product.  
> >
> >If you are interested in StoneBeat and need more information, let me know
> >and I would be happy to provide it.
> >
> >Rick McMaster
> >Sr. Network Security Engineer
> >ePlus Technology
> >http://www.eplus.com
> >Nasdaq: PLUS
> >
> >
> >-----Original Message-----
> >From: [email protected] [mailto:[email protected]]
> >Sent: Tuesday, January 23, 2001 5:49 PM
> >To: Raymond N
> >Cc: [email protected]
> >Subject: Re: [FW1] Using Nokia IP650 as Enterprise firewall??
> >
> >
> >
> >
> >
> >Raymond:
> >
> >     The Nokia IP650 will definitely handle your load. The IP440 should also
> >be
> >able to handle your load but am not as familiar with the specs on this
> >machine
> >(as we use a pair of Nokia IP650s here). On each of our Nokia IP650s we have
> >256MB of memory and a PII processor (448MHz). The IP650s will definitely be
> >able
> >to handle your load and then some.
> >
> >     As far as VRRP is concerned.... VRRP was developed by Nokia and as far
> >as I
> >know is only implemented on Nokia equipment. It could be possible that it
> >will
> >work on other platforms but I do not currently know of any yet and I have
> >never
> >heard of anyone implementing it on Sun equipment.
> >
> >     As far as an HA environment in regards to Sun equipment is concerned I
> >have
> >heard quite a few people use the Stonebeat Full Cluster product line. But as
> >I
> >have never used this product I am not very familiar with it. Maybe someone
> >from
> >this list could comment?
> >
> >     As far as a CheckPoint HA setup, since v4.1 SP2? CheckPoint has
> >encorporated some HA functionality into there code but I have not taken a
> >look
> >at it. Since we use VRRP here I have not really looked into this.
> >
> >     Now, my opinion is rather biased but the Nokia platforms are a very
> >solid
> >box. They are very easy to set up out of the box and are a very solid/stable
> >platform. Since you are familiar with Unix (being that your current machine
> >is
> >an Ultra-2 running Solaris 2.x) the jump to a Nokia platform running IPSO
> >(based
> >on FreeBSD) would be rather minor.
> >
> >     We basically made the jump that you are thinking about now a couple of
> >years back and the jump was NOT as traumatic as we had originally
> >anticipated.
> >
> >     Let me know if you would like more input.
> >
> >
> >
> >
> >
> >
> >
> >Raymond N <[email protected]> on 01/23/2001 02:32:00 PM
> >                                                              
> >                                                              
> >                                                              
> >  To:          [email protected]       
> >                                                              
> >  cc:          (bcc: James E Clukey/Rush/RSH)                 
> >                                                              
> >                                                              
> >                                                              
> >  Subject      [FW1] Using Nokia IP650 as Enterprise          
> >  :            firewall??                                     
> >                                                              
> >
> >
> >
> >
> >
> >
> >
> >Hi there,
> >
> >We are currently using Firewall-1 on a Sun Ultra 2 machine.  We have about
> >2000 workstations and servers behind it.  During the peak period of the
> >day, we have about 1000 to 1500 connection in the Firewall-1 's Active
> >session table.  We use both static NAT and hide NAT.  So far, the firewall
> >machine is doing well and we doesn't notice any load problem.
> >
> >Now, my question is if you think the Nokia IP650 (or the IP440) would have
> >sufficient (CPU, memory, etc.) capacity to replace the Sun Ultra 2 and
> >handle the current load?  Better?
> >
> >Another question is if the VRRP is only available for the Nokia setup, and
> >not for the Sun Ultra 2 machine?  I guess my question is if the Checkpoint
> >VRRP solution are built at the Firewall-1 software or at the hardware
> >(Nokia) platform.
> >
> >
> >Thanks in advance.
> >
> >-raymond
> >
> >
> >
> >============================================================================
> >====
> >     To unsubscribe from this mailing list, please see the instructions at
> >               http://www.checkpoint.com/services/mailing.html
> >============================================================================
> >====
> >
> >
> >
> >
> >
> >============================================================================
> >====
> >     To unsubscribe from this mailing list, please see the instructions at
> >               http://www.checkpoint.com/services/mailing.html
> >============================================================================
> >====
> >
> >
> 
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1
Comment: Made with pgp4pine 1.75-6

iQA/AwUBOm8fwVUqWOkDpMZ2EQLu+wCeJTQtRFSAYv1Pax87MebEXulMh9MAoJUZ
AthfdFdX9ZpYzeLZPyehL2p+
=Glq6
-----END PGP SIGNATURE-----




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.