NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Pix vs FW1



Hey - our firewall was down, the building was on fire and none of our users
even noticed..... ;-)

....then the coffee machine failed and all hell broke loose...

...I think it is pub time...yeah!

From: Juan Concepcion <[email protected]>
Reply-To: Mailing list for discussion of Firewall-1
<[email protected]>
To: [email protected]
Subject: Re: [FW-1] Pix vs FW1
Date: Fri, 14 Dec 2001 09:47:36 -0500

Gotta love those success storys....:0)
----- Original Message -----
From: "Graff, Tracy" <[email protected]>
To: <[email protected]>
Sent: Thursday, December 13, 2001 4:40 PM
Subject: Re: [FW-1] Pix vs FW1


> I have no experience with Pix, but I am using Checkpoint HA (v4.1 SP3) on Nokia boxes with VRRP and it works beautifully. We have two VPNs to remote sites. Our main firewall failed a couple weeks ago and none of the users even noticed. > > Tracy > > -----Original Message----- > From: Toth, David [mailto:[email protected]] > Sent: Thursday, December 13, 2001 4:07 PM > To: [email protected] > Subject: Re: [FW-1] Pix vs FW1 > > > The Checkpoint HA has been working great. Whenever I want to failover the firewall I just pull out one of the network cables. > I don't even bother typing the failover commands anymore. > > When I first started researching this I wanted to buy the Nokias for failover. I also have four pixes, and they have a hardware based failover that works great. For that reason, I figured that the Nokia hardware based failover would work better than any software based failover. Someone from Cisco told me that he personally knew the guy that wrote the firewall-1 software, and that he told him that the Checkpoint HA solution did not work. The people from Checkpoint made me a sweet deal for the HA software, but they did say that they were more comfortable running it on NG. They were kind enough to send their local Checkpoint Engineer out to work with me on the install of NG and HA. I have been very happy ever since. However, I am not using any complicated stuff on the Checkpoint, like VPN, or Secureremote, etc. I am just using it as a regular, simple firewall. > > Best Wishes, > > Dave in Cleveland. > > -----Original Message----- > From: Abraham, Elliott [mailto:[email protected]] > Sent: Thursday, December 13, 2001 2:36 PM > To: [email protected] > Subject: Re: [FW-1] Pix vs FW1 > > > How is your failover with NG. We are currently using Stonebeat and are having a number of issues with failover. > > -----Original Message----- > From: Toth, David [mailto:[email protected]] > Sent: Thursday, December 13, 2001 1:07 PM > To: [email protected] > Subject: Re: [FW-1] Pix vs FW1 > > > Ali, > > Yes, I installed it in September with the Checkpoint HA. I have been very happy with it. I recommend either that or just run NG on the Nokia's. Do you need to buy a vpn accelerator card with the Nokias, or is it fast enough? > > Dave in Cleveland > > -----Original Message----- > From: Ali Port [mailto:[email protected]] > Sent: Thursday, December 13, 2001 11:58 AM > To: [email protected] > Subject: Re: [FW-1] Pix vs FW1 > > > We've asked every vendor we've spoken to (and there has been a few) about NG > and all of them have said "hasn't been out long enough for us to recommend > it - wait for the SP". > > Is anyone using CP's HA on NG (sorry going acronym mad)? If so how do you > find it so far? > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[email protected]]On Behalf Of Toth, > David > Sent: Thursday, December 13, 2001 3:47 PM > To: [email protected] > Subject: Re: [FW-1] Pix vs FW1 > > > Ali, > > Why don't you just get the Checkpoint FW-1/NG and use the Checkpoint HA > solution? > > Dave in Cleveland. > > -----Original Message----- > From: Ali Port [mailto:[email protected]] > Sent: Thursday, December 13, 2001 9:41 AM > To: [email protected] > Subject: [FW-1] Pix vs FW1 > > > Hi > > We're looking into a fault tolerant firewall solution and would appreciate > some real world feedback. > > We need the failover to be 100% stateful, VPNs and all. There cannot be any > renegotiation of tunnels if we're in the middle of a transaction, it needs > to be seamless. > > We have narrowed down our options to Cisco PIX and FW-1 using Rainwall. We > would use the Cisco version of Enterprise Management Console - I think it is > called VMS (VPN Monitoring / Security Management Solution) so management > isn't an issue (unless VMS is no good). I appreciate that Rainwall is load > balancing instead of failover but it seems to do what we want. > > Our major issue is that the FW-1 solution is 3-4 times the price of the > Cisco solution however if the functionality is so much better we could > persuade the powers that be. > > Any info gratefully received. > > Ali Port. > > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > If you have any questions on how to change your > subscription options, email Ron Alcatraz at: > [email protected] > ================================================= > > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > If you have any questions on how to change your > subscription options, email Ron Alcatraz at: > [email protected] > ================================================= > > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > If you have any questions on how to change your > subscription options, email Ron Alcatraz at: > [email protected] > ================================================= > > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > If you have any questions on how to change your > subscription options, email Ron Alcatraz at: > [email protected] > ================================================= > > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > If you have any questions on how to change your > subscription options, email Ron Alcatraz at: > [email protected] > ================================================= > > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > If you have any questions on how to change your > subscription options, email Ron Alcatraz at: > [email protected] > ================================================= > > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > If you have any questions on how to change your > subscription options, email Ron Alcatraz at: > [email protected] > =================================================

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================


_________________________________________________________________
MSN Photos is the easiest way to share and print your photos:
http://photos.msn.com/support/worldwide.aspx

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.