Nokia Appliance vs Intel-Based Server

[mapman04]

I am planning an upgrade to my firewall. I currently run Checkpoint v4.1 on an Intel-Based Server. I'm looking for insight on what is better, using a Nokia Appliance or an Intel-Based Server. Any comments would be appreciated.

Regards,

mapman04

 

[rn4it]

Nokia appliance come prehardened, as well if you now a little unix, certain processes can be scripted to run automatically. ie logswitch, ftp logfiles off the mgmt server, cleanup files older then a specific date etc. As well, I've seen certain issues with a windows box that don't apply to the Nokia expecially virus related issues. Now on the down side, spec out your Nokia applicance well. Especially, your mgmt server, some of the Nokia appliances have a limitation on the amount of RAM that can be added to them. So if your a company with tight budgets, give your self lots of head room. Overall I like the Nokia's better, we have never had to reboot them in over a year. limited number of issues, daily maintence is all automated. Secure... Did have a bit of a learning curve in the beginning not knowing much unix.

 

[Piloria]

cant agree more.
for the nokia there is a good book on leaning its basic setup (Nokia network security isbn 1-931836-70-1 which may have a new version out)
used an intel based server for a few years then moved to the nokia so many headaches went away.

you can get away without knowing much unix (or any at all) as almost all the admin can be done via voyager (web based)
OS upgrades are very simple and firewall upgrades are a little more complex but still not to hard (if you have smart update then they are easy).

 

[rn4it]

There are some threads on cleanup scripts that I have posted as part of other questions posted. So that would give you a head start if you decided to go with a Nokia appliance.

 

[sds222]

I like the Secure Platform version that runs on the Intel platform. It is a hardened Linux version, so Linux/Unix experience helps ease the administration. But it is possibly the least expensive....