Re: [FW-1] International installations and support

[Joe McGean <Joe.McGean@FW1-NOSPAMALLIANZ.IE>]

You said:
#I need to deploy some firewalls in developing countries and would like to
#hear how others are providing hardware support.

The Nokia's can have a modem, get that, so you can dial in
remotely (although there was some inssue with Int. support
of the modem on Nokia's...but that may have changed...)

When you say 'developing countries' I am thinking:  "cold spare"
Also, use HA (two boxes)....so as to reduce hardware single-points
of failure. Nothing else, is really going to work.........

The CheckPoint Lic is not tighed to hardware...so even though you use
Nokia boxes, you can have Linuix, NT (ichy) or Netra Solaris...'cold spare'
boxes

The big thing here is, change management (use FW-1 enterprise console)
so you have a copy of the most recent rulebase......

And, also with 'cold spare' firewall hardware, remember the MAC
addresses are different, so flush NAT table, on forward (router)
and backward (DMZ servers, switch?, and internal router), when you
guide on-site people inserting the 'cold spare'.

I worked on an e-com install that was happening in Antigua
once, its all about the LightWave console server 3200
when it comes to remote management of Sun boxes. But
we had loads of Sun boxes, so it made sense. Never used
this particular console server with Nokia's however:

Here a smaller version:
http://www.lightwavecom.com/server_management/console800.html

Get this and have a modem attached, and also modem into the console
server. Have connections from live Nokia, 'cold spare' Nokia, and front
and back devices.

It might be worth you while, just going with Nokia 'cold spares',
10 min rebuild if you backed up the config., is a real nice
feature....

But it really is all about the console server........


-Bye

Joe McGean

Allianz, Ireland
Security Team







********************************************************************
Please Note:

Our e-mail address is now 'allianz.ie'

Visit our website at http://www.allianz.ie

Disclaimer :
The information contained and transmitted in this e-mail is
confidential information, and is intended only for the
named recipient to which it is addressed. The content of
this e-mail may not have been sent with the authority of
 the company. If the reader of this message is not the
named recipient or a person  responsible for delivering it
to the named recipient, you are notified that the review,
dissemination, distribution, transmission, printing or copying,
forwarding, or any other use of this message or any part of
it, including any attachments, is strictly prohibited. If you
have received this communication in error, please delete
the e-mail and destroy all record of this communication.
Thank you for your assistance.
********************************************************************

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
ralcatra@ts.checkpoint.com
=================================================