Checkpoint over Pix

[PAGEME1000]

Hi People

We currently run a pix 515 implementation with 6 dmz's. The firewall config currently prints out to about 15 pages. On reviewing the solution we are contemplating going to a checkpoint solution on Nokia. Can anyone suggest any pro's or cons to moving away from the pix solution. I have no traffic utilization stats to help persuade our argument....

Thanks

Page :-D

 

[ChrisAC]

Massive licencing costs on FW-1! Great firewall, superb VPN capabilities, stupid licence scheme which costs a fortune!

The policy editor looks groovy though and the logging is far better than the PIX.

Chris.
************************
Chris Andrew, CCNA
chris@iproute.co.uk
************************

 

[angelo990]

Check Point is porbably one of the easiest FWs to manage in the market, although licensing & support cost lots of dollars.
Also, I believe they have patented the stateful inspection, if you want to read about that, I recommend u do.
By the way, Do cisco pix fws fo NAT using one IP address or does it require a IP Pool?


Thanks & good luck!

 

[ChrisAC]

The PIX can NAT to one address or use a pool or do both!

Chris.
************************
Chris Andrew, CCNA
chris@iproute.co.uk
************************