| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] [Re: [FW-1] HTTP security server woes on NG... frustration levelrising...]
- To: [email protected]
- Subject: Re: [FW-1] [Re: [FW-1] HTTP security server woes on NG... frustration levelrising...]
- From: Steve McNutt <[email protected]>
- Date: Mon, 10 Jun 2002 10:29:54 -0400
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcIQfakWA4t+YyaWTIq0TfF8DDufZQADIoaQ
- Thread-topic: Re: [FW-1] [Re: [FW-1] HTTP security server woes on NG... frustration levelrising...]
I don't like to spread bad vibes and cast aspersions on products
produced by respectable companies, but in this case I'm afraid don is
right on the money.
Every time I have set up a security server for a customer (usually it's
done for virus inspection of http and smtp traffic) I've had to put up
with a steady stream of trouble calls, and unless they got in there are
messed with something, the only thing I can tell them is to restart the
firewall.
It works great in a test lab, but in a production environment the
security servers do not seem to be stable under a load.
-----Original Message-----
From: Don [mailto:[email protected]]
Sent: Monday, June 10, 2002 8:35 AM
To: [email protected]
Subject: Re: [FW-1] [Re: [FW-1] HTTP security server woes on NG...
frustration levelrising...]
> Interesting. I've seen the opposite thus far. FP1's HTTP security
> server runs with no problems but FP2's exhibits several problems. We
> are in the process of trouble-shooting the problem(s) with CP.
Abe,
As I think you ca see by now, CheckPoint should probably stick to
writing a fast stateful packet filter and not a proxy based firewall :)
The security servers always seem to have performance problems, and they
tend to break a number of connections. If you can get away without using
them, I would highly recommend it.
-Don
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
