NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] limits on Checkpoint



oh. no biggee really.  if you have that much, then i ASSUME you have an
UNLIMITED version.
with this level, your concern will most likely be optimal performance, from
the specific FW itself to a possibly distributed/load-balanced
configuration. (separate mgt station, multiple FW modules, etc)

so, lots o' h/d space, butt load of ram, 2 cpu's (i like the DELL Xeon 2.4
ghz setup - a screamer! even on 2k), etc, etc.

why the above, well with that many objects, traffic, etc. an attempt to pull
up the logviewer will simply kill dat box.  so make it beefy.  your logging
will be extensive, so make the h/d large w/very high rpms.

check out some switches w/specific hooks for FW issues to help distribute
traffic.  F5, Foundry, etc.

Then, knock yourself out by creating the rulesets. course your comment about
setting a rule for each one is quite the laugher! yeah right!  you'll
learn....

-----Original Message-----
From: MARTIN-RDGUEZ,FELIX (HP-Spain,ex1)
[mailto:[email protected]]
Sent: Tuesday, May 14, 2002 2:10 AM
To: [email protected]
Subject: Re: [FW-1] limits on Checkpoint


I mean real limits. I have 10.000 clients that are going through the
firewall.
I am thinking of
        - setting one rule for each one ( limit on rules ? )
        - setting one rule and setting 10.000 network objects in the
"source" or "destination" field

what about these sizes ?

regards

> -----Original Message-----
> From: Wyatt, Kenny, ITS [mailto:[email protected]]
> Sent: Monday, May 13, 2002 6:10 PM
> To: [email protected]
> Subject: Re: [FW-1] limits on Checkpoint
>
>
> several hundred.
> <ditto>
> we use more than 30 in some cases.
>
> really, a major limit is based on your licensing scheme: 25,
> 100, unlimited
> users?
>
> k
>
> -----Original Message-----
> From: MARTIN-RDGUEZ,FELIX (HP-Spain,ex1)
> [mailto:[email protected]]
> Sent: Monday, May 13, 2002 10:09 AM
> To: [email protected]
> Subject: [FW-1] limits on Checkpoint
>
>
> Dear all,
>
> I would like to know about some "limits" on CheckPoint:
>
> How many rules does CheckPoint support ?
> How many network objects can you define ?
> How many network objects can you define on a "source" or
> "destination" field
> on a rule ?
>
> Thanks and regards,
>
>         Felix
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.