| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] Should I, or should I not...
Personally, I like my Nokias because they're versatile and meet all of my
needs. Others may disagree. In this case though, if you want to build a
FW-1 based system which is very good at simply pumping through a lot of
unencrypted traffic, consider building a three node Linux cluster with
Rainwall on top of it.
The benefits I see are:
1. choice of hardware if this is important to you
2. higher throughput compared with Solaris and Windows if you believe the
graphs and charts on CP's website.
3. lower cost for PC-based hardware as opposed to Nokia gear which you pay
a premium for.
4. an n-node HA/LB cluster allows you to size the cluster appropriately to
take advantage of rolling maintenance and unforeseeable failures.
If you add encryption to the mix, your performance goes way down (relative
to the amount of encrypted traffic actually). Rainwall gets its impressive
throughput by utilizing asymmetric routing through the cluster. This will
trash VPN connections but is manageable and will lead to a degredation of
throughput levels.
I believe Compaq/CP/Rainfinity have some sort of bundled offering now but I
can't comment on how that precise config will work for you. If you are
looking for an appliance type of solution, a la Nokia, this may be an
alternative.
Chris
-----Original Message-----
From: Idan Dolev
To: Checkpoint Mailing List (E-mail)
Sent: 9/5/01 2:48 AM
Subject: [FW1] Should I, or should I not...
Hi,
I'll tell you my dilemma.
We are interested in securing a main site by using the Checkpoint Nokia.
However I am afraid that it would not stand the utilization nor easy to
manage not to mention a few strange things Nokia suffers.......
So my question is, judging by your experience with the Nokia, can it
hold
about 40Mps,24 by 7 ? (I am not talking about encryption, but pure
communication )
Is it well hardware proof ? good HA solutions.
I appreciate your answer.
Idan Dolev,
========================================================================
========
To unsubscribe from this mailing list, please see the instructions
at
http://www.checkpoint.com/services/mailing.html
========================================================================
========
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
|
|
