A comment on with a slightly different take to those I have heard on the
list before, "No one was ever fired for buying CheckPoint".
On a serious note though,
CheckPoint is a solid industry proven product that satisfies throughput
requirements for 99% of the endusers. How many sites actually exceed 80Mb of
throughput?
The tech support is some of the worst I have ever experienced in the
industry, fortunately you will not need it that often. I actually consult
the Usenet list and some private web sites for almost all of my issues.
Their support is basically a black hole.
It is expensive and does not provide that many licensing levels to fit
everyone's needs. Client VPN is solid once you have it working and many
updates are released that provide additional features.
Runs on several platforms with no change in GUI interface. If you can
configure CheckPoint on Solaris you can configure it on NT, Nokia, Linux,
AIX, etc...
Everyone talks about throughput, throughput, throughput. Hardly anyone
actually needs to exceed the amount that could be supported with a
CheckPoint product. They are the number one product and anyone you ask will
tell you it is not due to their support infrastructure.
-----Original Message-----
From: George H. York [mailto:[EMAIL PROTECTED]]
Sent: Sunday, November 26, 2000 7:19 AM
To: [EMAIL PROTECTED]
Subject: Re: comparison between checkpoint firewall-1 and cisco pix 525
You might also want to take a look at www.netwolves.com. They have some good
offerings!
Chuck Larrieu wrote:
> Good link. thanks.
>
> I notice this evaluation was done edge device to edge device, and not
> user/PC to edge device. It is this kind of PC / VPN connectivity I was
> talking about when reporting the hearsay my DE gave me.
>
> My understanding is that at this point in time there are a number of
issues
> with VPN PC client software. And that there is not much available in the
way
> of VPN client software for Mac and Unix boxes. No doubt there are lots of
> VPN clients for Linux boxes, but that may have its own set of issues as
> well.
>
> Unfortunately, it is this PC / VPN client kind of connection that most of
my
> customers are asking about.
>
> Chuck
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> hal9001
> Sent: Saturday, November 25, 2000 2:00 PM
> To: Chuck Larrieu; [EMAIL PROTECTED]
> Subject: Re: comparison between checkpoint firewall-1 and cisco pix
525
>
> If you want both a GUI and "Wire Speed" throughput try
>
> http://www2.netscreen.com/pub/
>
> You might be in for a surprise!
>
> Karl
> ----- Original Message -----
> From: "Chuck Larrieu" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Saturday, November 25, 2000 8:37 PM
> Subject: RE: comparison between checkpoint firewall-1 and cisco pix 525
>
> > I have heard both Cisco and Checkpoint sales engineers ( not in the same
> > room at the same time ) agree to the following points:
> >
> > 1) Checkpoint management ( GUI ) is FAR superior to anything Cisco has.
> > 2) PIX is FAR superior in terms of throughput
> > 3) Everything else the vendors say are subject to interpretation and
> > prejudice
> >
> > Checkpoint management superiority shows itself in situations where you
> have
> > multiple firewalls and multiple security domains, where policy requires
> > constant updating, etc. PIX is just fine in situations where are limited
> > number of firewalls, and/or limited policy change, so command line
> > configuration is not so overwhelming.
> >
> > I have also heard ( but do not know for a fact ) that at this time,
> > Checkpoint VPN-1 client side software is the most stable on the market
for
> > client PC secure VPN tunnels. My source was my DE, who tells me that she
> has
> > derived several VPN designs around the Checkpoint/Nokia product. The
> > feedback from the field, she tells me, is that there are fewer issues
with
> > Checkpoint than with Cisco Secure Client and the VPNet client. This too
> may
> > be one of perception. I have not read any industry comparison tests.
> >
> > In the end, one should begin with a clear and written security policy,
and
> > then choose based upon which vendor satisfies the precepts of that
policy.
> >
> > Chuck
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> > Jason Roysdon
> > Sent: Saturday, November 25, 2000 11:58 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: comparison between checkpoint firewall-1 and cisco pix 525
> >
> > Correct me if I'm wrong, but one of the key differences is that
Checkpoint
> > requires a "subscription" fee every year or so.
> >
> > The biggest selling point I give to customers is that Firewall-1 runs on
> top
> > of Unix or NT, and use good ol' FUD regarding OS that aren't that secure
> to
> > begin with, vs. the PIX has a completely hardened/customized OS.
> >
> > Best suggestion would be to hit both vendors' sites and see what they
have
> > to say.
> >
> > --
> > Jason Roysdon, CCNA, MCSE, CNA, Network+, A+
> > List email: [EMAIL PROTECTED]
> > Homepage: http://jason.artoo.net/
> > Cisco resources: http://r2cisco.artoo.net/
> >
> >
> > ""D'souza Agnelo"" <[EMAIL PROTECTED]> wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Hi,
> > > Can anyone give me comparisons between checkpoint
> > > firewall-1 and cisco pix 525.
> > >
> > >
> > > Agn
> >
> >
> >
> > _________________________________
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> > _________________________________
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
> _________________________________
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
