Re: [fw-wiz] Intel vs. special purpose FW-1 servers

From: David Lang (david.lang_at_digitalinsight.com)
Date: 07/22/05

  • Next message: Keith A. Glass: "RE: [fw-wiz] Intel vs. special purpose FW-1 servers" 
    To: Emily Conrad <emilydconrad@hotmail.com>
Date: Thu, 21 Jul 2005 18:23:45 -0700 (PDT)

    as others have said, find out what your real performance requirements are,
    and keep the future in mind.

    check the cost of upgrading the 'optiomized' hardware, you may be amazed
    at the costs ($1k for 512M of ram for example)

    generix x86 hardware is so fast nowdays that I really doubt that you need
    the added performance from an 'optimized' version.

    there are valid arguments (on both sides) about managing the OS yourself
    vs trusting the vendor to do all the OS changes (the appliance approach)

    personally I would buy my own hardware and run it myself, there are just
    too many times when I want to do just a little something extra on the
    firewall that would be trivial to script, but isn't allowed on an
    appliance.

    David Lang

    On Tue, 12 Jul 2005, Emily Conrad wrote:

    > Date: Tue, 12 Jul 2005 20:17:59 +0000
    > From: Emily Conrad <emilydconrad@hotmail.com>
    > To: firewall-wizards@honor.icsalabs.com
    > Subject: [fw-wiz] Intel vs. special purpose FW-1 servers
    >
    > Hello,
    >
    > We are working on a project to upgrade our firewall infrastructure.
    >
    > One of the questions is whether to use FW-1 on a standard Intel server or to
    > use a special-purpose optimized version of FW-1 on a dedicated hardware
    > platform such as Nokia firewall appliance or Crossbeam systems C30/X40.
    >
    > Does anyone have any advice on what factors are important when making such a
    > decision?
    >
    >
    > Thanks,
    >
    > Emily
    >
    > _________________________________________________________________
    > FREE pop-up blocking with the new MSN Toolbar - get it now!
    > http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
    >
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    > 

    -- 
There are two ways of constructing a software design. One way is to make it so simple that there are obviously no deficiencies. And the other way is to make it so complicated that there are no obvious deficiencies.
  -- C.A.R. Hoare
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
  • Next message: Keith A. Glass: "RE: [fw-wiz] Intel vs. special purpose FW-1 servers"

    Relevant Pages

    • Re: What firewall for small medical research lab
      ... The hardware and software cost are low. ... would be the lowest learning curve. ... Ok, ipcop minimal learning curve- GUI based aimed at entry level networkers, however maximum feature set with a huge amount of addons available such as copfilter for email and www.mhaddons.tk. ...
      (Security-Basics)
    • RE: What firewall for small medical research lab
      ... What firewall for small medical research lab ... I have been asked to research what good, low cost, firewall solutions ... Pay someone to set up a PC based firewall running on surplus hardware ... Try Webroot's Spy Sweeper Enterprisefor 30 days for FREE with no ...
      (Security-Basics)
    • RE: What firewall for small medical research lab
      ... I have been asked to research what good, low cost, firewall solutions ... The hardware and software cost are low. ... Try Webroot's Spy Sweeper Enterprisefor 30 days for FREE with no ...
      (Security-Basics)
    • Re: What firewall for small medical research lab
      ... The hardware and software cost are low.. ... Pay someone to set up a a PC based firewall running on surplus hardware ...
      (Security-Basics)
    • Re: 4331 weight
      ... on where we replaced the hardware with a new boxes. ... almost never had to pay more than the cost of the truck to take them away. ... for $500 by the university that I did a contract to convert them from OS/390 ... For IBM-MAIN subscribe / signoff / archive access instructions, ...
      (bit.listserv.ibm-main)