[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] limits on Checkpoint
oh. no biggee really. if you have that much, then i ASSUME you have an UNLIMITED version. with this level, your concern will most likely be optimal performance, from the specific FW itself to a possibly distributed/load-balanced configuration. (separate mgt station, multiple FW modules, etc) so, lots o' h/d space, butt load of ram, 2 cpu's (i like the DELL Xeon 2.4 ghz setup - a screamer! even on 2k), etc, etc. why the above, well with that many objects, traffic, etc. an attempt to pull up the logviewer will simply kill dat box. so make it beefy. your logging will be extensive, so make the h/d large w/very high rpms. check out some switches w/specific hooks for FW issues to help distribute traffic. F5, Foundry, etc. Then, knock yourself out by creating the rulesets. course your comment about setting a rule for each one is quite the laugher! yeah right! you'll learn.... -----Original Message----- From: MARTIN-RDGUEZ,FELIX (HP-Spain,ex1) [mailto:[email protected]] Sent: Tuesday, May 14, 2002 2:10 AM To: [email protected] Subject: Re: [FW-1] limits on Checkpoint I mean real limits. I have 10.000 clients that are going through the firewall. I am thinking of - setting one rule for each one ( limit on rules ? ) - setting one rule and setting 10.000 network objects in the "source" or "destination" field what about these sizes ? regards > -----Original Message----- > From: Wyatt, Kenny, ITS [mailto:[email protected]] > Sent: Monday, May 13, 2002 6:10 PM > To: [email protected] > Subject: Re: [FW-1] limits on Checkpoint > > > several hundred. > <ditto> > we use more than 30 in some cases. > > really, a major limit is based on your licensing scheme: 25, > 100, unlimited > users? > > k > > -----Original Message----- > From: MARTIN-RDGUEZ,FELIX (HP-Spain,ex1) > [mailto:[email protected]] > Sent: Monday, May 13, 2002 10:09 AM > To: [email protected] > Subject: [FW-1] limits on Checkpoint > > > Dear all, > > I would like to know about some "limits" on CheckPoint: > > How many rules does CheckPoint support ? > How many network objects can you define ? > How many network objects can you define on a "source" or > "destination" field > on a rule ? > > Thanks and regards, > > Felix > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|