NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Pix vs FW1



The Checkpoint HA has been working great. Whenever I want to failover the firewall I just pull out one of the network cables.
I don't even bother typing the failover commands anymore.

When I first started researching this I wanted to buy the Nokias for failover. I also have four pixes, and they have a hardware based failover that works great. For that reason, I figured that the Nokia hardware based failover would work better than any software based failover. Someone from Cisco told me that he personally knew the guy that wrote the firewall-1 software, and that he told him that the Checkpoint HA solution did not work. The people from Checkpoint made me a sweet deal for the HA software, but they did say that they were more comfortable running it on NG. They were kind enough to send their local Checkpoint Engineer out to work with me on the install of NG and HA. I have been very happy ever since. However, I am not using any complicated stuff on the Checkpoint, like VPN, or Secureremote, etc. I am just using it as a regular, simple firewall.

Best Wishes,

Dave in Cleveland.

-----Original Message-----
From: Abraham, Elliott [mailto:[email protected]]
Sent: Thursday, December 13, 2001 2:36 PM
To: [email protected]
Subject: Re: [FW-1] Pix vs FW1


How is your failover with NG.  We are currently using Stonebeat and are having a number of issues with failover.

-----Original Message-----
From: Toth, David [mailto:[email protected]]
Sent: Thursday, December 13, 2001 1:07 PM
To: [email protected]
Subject: Re: [FW-1] Pix vs FW1


Ali,

Yes, I installed it in September with the Checkpoint HA. I have been very happy with it. I recommend either that or just run NG on the Nokia's. Do you need to buy a vpn accelerator card with the Nokias, or is it fast enough?

Dave in Cleveland

-----Original Message-----
From: Ali Port [mailto:[email protected]]
Sent: Thursday, December 13, 2001 11:58 AM
To: [email protected]
Subject: Re: [FW-1] Pix vs FW1


We've asked every vendor we've spoken to (and there has been a few) about NG
and all of them have said "hasn't been out long enough for us to recommend
it - wait for the SP".

Is anyone using CP's HA on NG (sorry going acronym mad)?  If so how do you
find it so far?

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of Toth,
David
Sent: Thursday, December 13, 2001 3:47 PM
To: [email protected]
Subject: Re: [FW-1] Pix vs FW1


Ali,

Why don't you just get the Checkpoint FW-1/NG and use the Checkpoint HA
solution?

Dave in Cleveland.

-----Original Message-----
From: Ali Port [mailto:[email protected]]
Sent: Thursday, December 13, 2001 9:41 AM
To: [email protected]
Subject: [FW-1] Pix vs FW1


Hi

We're looking into a fault tolerant firewall solution and would appreciate
some real world feedback.

We need the failover to be 100% stateful, VPNs and all.  There cannot be any
renegotiation of tunnels if we're in the middle of a transaction, it needs
to be seamless.

We have narrowed down our options to Cisco PIX and FW-1 using Rainwall.  We
would use the Cisco version of Enterprise Management Console - I think it is
called VMS (VPN Monitoring / Security Management Solution) so management
isn't an issue (unless VMS is no good).  I appreciate that Rainwall is load
balancing instead of failover but it seems to do what we want.

Our major issue is that the FW-1 solution is 3-4 times the price of the
Cisco solution however if the functionality is so much better we could
persuade the powers that be.

Any info gratefully received.

Ali Port.

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.