Re: [FW-1] Checkpoint vs. Netscreen

[Christopher Gripp <cgripp@FW1-NOSPAMAXCELERANT.COM>]

As a LAN 2 LAN VPN appliance goes the NS is MUCH better than the Checkpoint.  For software clients the CP Securemote is better than the IRE client that Netscreen uses. 

 

We deploy and manage both and they each have their strengths and weaknesses but the above mentioned are probably the biggest in my mind.

 

Christopher Gripp
Systems Engineer
Axcelerant

"Impartiality is a pompous name for indifference, which is an elegant name for ignorance."  G.K. Chesterton

-----Original Message-----
From: Faris, Craig [mailto:CFaris@HSA.CA]
Sent: Wednesday, April 24, 2002 12:41 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] Checkpoint vs. Netscreen

We currently own Checkpoint VPN-1 on NT (256 user version).  I now have 3 (20-60 user) branch offices behind this firewall and need to upgrade to Enterprise.  We have about 100 internal users who browse the Web and I have 2 small VPN based (2-3 user) remote offices using DSL.  We are located in Ontario, Canada.  Quotes I have been getting are in the $13,500-$14,500CDN (9000-9600USD approx.) for the upgrade and I will go from $2500/year (cdn) for software subscription to $5000/year (cdn).

Total Today = $18500

 

I am having trouble justifying this cost and I am considering buying a Netscreen-25 (approx $5250MSRP cdn (one time) + $900/year) or Netscreen-50 (approx $8900cdn one time) + 1950/year.)

Total to Replace Today = $10850

 

Does anyone have any input on the Netscreen vs Checkpoint? Thanks in advance.