RE: [Full-Disclosure] PIX vs CheckPoint

From: Ray P (sixsigma98_at_hotmail.com)
Date: 06/30/04

  • Next message: Simon Burr: "Re: [Full-Disclosure] PIX vs CheckPoint" 
    To: full-disclosure@lists.netsys.com
Date: Wed, 30 Jun 2004 02:11:39 +0000

    You sure got a whole bunch of good opinions with such a short question. :-)

    As always, the answer is that it depends on what you need to do. If you need
    a basic firewall and you have no bucks, go PIX. If you need secure remote
    access as well (built-in personal firewall, ability to deny access based on
    the computer configuration, AD interoperability, etc.) go Check Point (or
    buy additional Cisco products to gain the same capability). If you are
    managing only one or two firewalls, go PIX. If you're handling dozens or
    hundreds, go Check Point. If you don't care about application-layer attacks
    against your infrastructure, go PIX. If you think attacks against the
    applications are the coming thing, go Check Point.

    There is no right or wrong answer. They both call themselves "firewalls" but
    that's where the similarity ends. I suspect most people would find a mix of
    both products would provide their operation with optimal protection.

    And like all products, implementation and configuration errors can turn
    either one into Swiss Cheese.

    Ray

    >From: "Darkslaker" <rienzi@nimrod.com.mx>
    >To: full-disclosure@lists.netsys.com
    >Subject: [Full-Disclosure] PIX vs CheckPoint
    >Date: Tue, 29 Jun 2004 13:24:05 -0500 (CDT)
    >
    >i am studying for the CCSA and my Friend for CSPFA in the interchange of
    >ideas we did not find differences significant; maybe two ; PIX run in OS
    >for CISCO and CheckPoint in many platforms; and checkPoit have more
    >products.
    >
    >My question is PIX or Checkpoint what is better and why.
    >
    >
    >
    >"Yo nací para atrapar dragones en sus guaridas y para recoger flores. Yo
    >nací para pasar las mañanas contando historias divertidas, para soñar a la
    >deriva como si fuera yo un arroyo y para caminar descalzo a la luz del sol"
    >
    >_______________________________________________
    >Full-Disclosure - We believe in it.
    >Charter: http://lists.netsys.com/full-disclosure-charter.html

    _________________________________________________________________
    Is your PC infected? Get a FREE online computer virus scan from McAfee®
    Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Simon Burr: "Re: [Full-Disclosure] PIX vs CheckPoint"

    Relevant Pages

    • RE: Firewall recommendations?
      ... Hi at my current job we use checkpoint, and I personally love that firewall ... I am not a big fan of the pix and I have never played with the ISA ...
      (Security-Basics)
    • RE: Firewall recommendations?
      ... I have run both Checkpoint and PIX in my environment. ... The PIX is a true stateful inspection firewall. ... I am not a big fan of the pix and I have never played with the ISA ...
      (Security-Basics)
    • Re: Firewall recommendations?
      ... and you can say so does the PIX. ... checkpoint can be had as an appliance or you might want to install and configure ... its much easier to go with an appliance type firewall. ... Then you should consider your network requirementand your business requirements ...
      (Security-Basics)
    • [Full-Disclosure] PIX vs CheckPoint
      ... ideas we did not find differences significant; maybe two; PIX run in OS ... My question is PIX or Checkpoint what is better and why. ... nací para pasar las mañanas contando historias divertidas, ...
      (Full-Disclosure)
    • RE: suggestions on a good firewall
      ... Actually the checkpoint implied rules are not actually hidden. ... over pix cause just look at the bugtraq record on pix. ... suggestions on a good firewall ... experience should ever be handed main security responsibility. ...
      (Security-Basics)