Re: [FW1] Nokia vs. NT

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Jason,
Actually, even with flows, it does not touch linux with 250mbit unencrypted, and linux will still dance circles around nokia when it comes to vpn.

Nokia with flows is definitely a step in the right direction, you are definitely correct.

CT

"Luke, Jason (ISS Southfield)" wrote:

Just to throw my .02 in, nobody has brought up IPSO 3.3 with Flows.  From what I hear, the Flows technology improves throughput dramatically.  Initial testing was something along the order of 2 to 3 times throughput improvement.    Non-vpn throughput of over 200 Mbps, vpn throughput at least double. If you want to see Nokia performance at its best, go with 3.3 w/ Flows.

-----Original Message-----
From: bandit@zcore.net [mailto:bandit@zcore.net]
Sent: Monday, February 19, 2001 2:21 PM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: Re: [FW1] Nokia vs. NT
 

I trust these operating systems with be properly tuned for optimal performance?NT leaves a lot to be desired in a default installation. Many services should be disabled, many registry keys should be set to improveperformance, disabled paging executive, proper tuning of network card drivers, buffers etc etc. I would use the Intel82559 based network cards, however I prefer the i960 based ones. From what I have seen, Linux has poor support for VLAN's at this time (unless they havesome new code out in last 4 months). That is one critical requirement of my setup. 

----- Original Message -----

From: Tim Holman

To: fw-1-mailinglist@lists.us.checkpoint.com

Sent: Monday, February 19, 2001 1:30 PM

Subject: Re: [FW1] Nokia vs. NT

 I've a funny feeling you'll never see a test using equal componentry, at least not from the official Checkpoint / Nokia sites ! 

 

----- Original Message -----

From: Jeff Deitz

To: 'tstala@lucent.com' ; Larry Pingree ; Tim Holman ; Tim Anderson ; fw-1-mailinglist@lists.us.checkpoint.com

Sent: 19 February 2001 17:18

Subject: RE: [FW1] Nokia vs. NT

 After looking at the Nokia site and specifications, it does not look like Nokia supports Gig cards(unless the information on the site is not up to date) so that would be an accurate comparison. If one company does not support Gig cards and the other does, that is their choice and they be faulted for it. These are then honest results because they compare technology that each company supports.

What was surprising in the comparison on the checkpoint site is that the Linux and RS/6000 systems had 2 Gig cards in them and the NT, Nokia and Solaris system only had 4x10/100 cards. They should redo the test with both the NT and Solaris systems with Gig cards for an accurate comparison. I'll bet the Nokia system falls to the bottom of the list then.

The link again for those that don't know: http://www.checkpoint.com/products/firewall-1/pbrief.html
 

-----Original Message-----
From: Thomas Stala [mailto:tstala@lucent.com]
Sent: Monday, February 19, 2001 7:20 AM
To: Larry Pingree; Tim Holman; Tim Anderson;
fw-1-mailinglist@lists.us.checkpoint.com
Subject: RE: [FW1] Nokia vs. NT
 

I have seen these numbers. I was amazed until I noticed that they were
running 10/100 on Nokia and Gig cards on the NT system.

I also had someone telling me that Lynx on an Intel chipset kicked but on a
Sun Solaris. They showed me the statistics. The Lynx box was using Gig cards
and the Sun Solaris had a quad 10/100.

These are not honest results unless they are using the same equipment. Gig
cards are always going to kick the heck out of 10/100 cards

Thomas Stala
tstala@lucent.com
Hope this helps