Re: Checkpoint - Nokia Boxes vs Solaris

From: Alan Strassberg (alan@internal.wj.com)
Date: 03/29/02 

From: alan@internal.wj.com (Alan Strassberg)
Date: 28 Mar 2002 20:55:40 -0800

In article <3CA3D399.10004@intekom.com>, Paul Dawson <p@intekom.com> wrote:
>I have a few questions about these firewalls.
>
>Do CP-nokia firewalls support a distributed install? (I dont think they do?)

        Nokia sells a product called Horizon Manager that distributes
        updates globally.

>Do the nokia boxes require that the installation be distributed for the
>use of VRRP HA, as the solaris requires for stonebeat HA?

        Define distributed. VRRP is a local protocol for failover.
        Stonebeat is local and multicast. Both Solaris and Nokia
        require full Checkpoint installs for failover. Guess I don't
        understand the question.
>
>Would the nokia box not be a better solution if it is required to run a
>routing protocol between the routers and the firewalls, because this
>eliminates the need for a third party product like Zebra on Solaris?

        Routing on a firewall is A Bad Idea(tm). Why would you want to
        do this ? A static route is all that's usually needed. Zebra
        is still under development and not ready for prime time.
        Get a router if you need routing. Get a fireawall to protect
        yourself.

>What would be some of the pros and cons of using one over the other?

        I favor Nokias - I like appliances. I think Nokia
        support is better than Checkpoint too. The appliance
        approach of a complete distribution (O.S., firewall,
        and updates in one package) appeals to my laziness.

                                        alan

Relevant Pages

  • Checkpoint - Nokia Boxes vs Solaris
    ... Do CP-nokia firewalls support a distributed install? ... Do the nokia boxes require that the installation be distributed for the ... eliminates the need for a third party product like Zebra on Solaris? ...
    (comp.security.firewalls)
  • Re: VMS cluster behind a *NIX firewall
    ... you are talking about homegrown firewalls rather than commercial offerings). ... growing market share and VMS is shrinking. ... I run VMS, Solaris, RHEL, and Windows XP at home. ... Applications, applications, applications, applications,... ...
    (comp.os.vms)
  • Re: Checkpoint - Nokia Boxes vs Solaris
    ... :>Do CP-nokia firewalls support a distributed install? ... You've seen the distributed install question before. ... not a "local protocol". ... but that doesn't mean people won't continue to run routing ...
    (comp.security.firewalls)
  • Re: VMS cluster behind a *NIX firewall
    ... There is no access to raw Solaris for outsiders to attack (unless ... you are talking about homegrown firewalls rather than commercial offerings). ... I have had telnet turned off on every server box of any kind ... the VMS community. ...
    (comp.os.vms)
  • Re: VMS cluster behind a *NIX firewall
    ... There is no access to raw Solaris for outsiders to attack (unless ... you are talking about homegrown firewalls rather than commercial offerings). ... growing market share and VMS is shrinking. ... I run VMS, Solaris, RHEL, and Windows XP at home. ...
    (comp.os.vms)
Quantcast