Moving up or over to Nokia & CheckPoint Firewall 1 1

[hinesjrh]

I currently have a Cisco PIX 515e and my VPN solution is via Microsoft's Windows 2000 VPN app. These existed when I joined my current org. over a year ago. I have been working to upgrade / replace these. At a previous employer we had installed CheckPoint firewall 1 on dual Nokia boxes, but I was not real involved in the implementation and left the org. soon after. I was however impressed withe Nokia and CheckPoint solution, support, and redundance.

Can someone give me some information on Nokia's / CheckPoint's current solutions including a rough cost of a redundant setup that offers a VPN solution as well? I need to do some quick budgeting for my managers!

 

[kgohel]

The cost for the entire setup would depend on many factors

Including
- how many internet links and locations you want to protect
- what is your requirement for HA? Do you want to do HA with active active? or Active - passive?
_ checkpoint offers a separate cluserxl license for the AA HA. I believe it already does HA in active passive mode. If you are doing active active then you have to get a full blown license.

checkout

http://pricelist.checkpoint.com/US/PLUSGeneral/generallist.asp

I've just purchased 2 nokia ip390 boxes with a 5 site management / 1 gateway license, and additional license. I also got 24x7 next day hardware replacement support from nokia, which also covers checkpoint support.

Additionally, I purchased smartdefence subscription (provides gateway av updates as well as IPS/IDS), enterprise software subscription), Floodgate for QoS/. Entire cost including taxes and 2 day integration is about mid 50k.

Again as I mentioned, the cost would come down to what kind of setup / capabilities you are looking for.

I would suggest call your local Nokia and Checkpoint account reps.

Hope this helps.

Ketan