Re: [FW1] Pros and Cons of IP440 vs Solaris Checkpoint

[hesselsp@FW1-NOSPAMashaman.dhs.org]

inline comments.

On Mon, 5 Feb 2001, Jason Costomiris wrote:
> : For example, you cannot add software to assist the management of routes
> : without paying for it.  Not like dynamic routing has any place on a
> : firewall, but that's just an example of the closed nature of the Nokia
> : product.
> 
> Completely untrue.  There is an unsupported program, available through
> the knowledge base called "addstatic".  It's function is to make it easy
> to add static routes to a unit.
> 

I think we are failing to notice the difference between statis and
dynamic:))

> : On the downside, if you are an expert in UNIX, you can't configure the
> : thing.
> 
> Again, not true....  There's no reason you can't configure it via the 
> CLI.  Don't expect to be supported, but there's no reason you can't do that.
> 

But if you configure the solaris box, you are still supported.  No one
wants to be put into an unsupported situation.

> : In my own opinion, the Nokia product had immense potential that was
> : sidetracked by capitalizing on people who previously overpaid for a
> : massive and overpowered Sun system for their packet-filtering firewall
> : device.
> 
> You forgot to mention the fact that IPSO includes built-in HA functions that
> cost thousands of $$ to add to Solaris.  You also forgot to mention how much
> easier it is to manage IPSO releases than it is to manage the myriads of
> Solaris patches.
> 

Correct me if I am wrong(and I likely am), but isn't the nokia HA solution
just in the routing protocol?  I mean VRRP is just the standards based 
redundant routing protocol resulting from ciscos HSRP, right?  My guess is
that GateD doesn't support this though(yet), so maybe they are a leg up
here.  But if you can find a routing daemon capable of supporting
HSRP/VRRP then you could easily implement your own HA(well,.. as HA as
nokia anyway) solution.


> 



-- 
--Paul



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================