Correction. The netscreen will do non-proprietary trunking, (not ISL).

-----Original Message-----
From: Christopher Larson [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 15, 2001 11:04 AM
To: 'Aamir Lakhani'; 'roy'; [EMAIL PROTECTED]
Subject: RE: How about PIX vs Netscreen


The netscreen is a very ggod box and simple to setup. The problem with the
Netscreen is it's scalability. The 1000 has the ability to do ISL off it's
interfaces, but the 100 and 10 do not and they only have 3 ports so you are
limited to Inside, Outside and a single DMZ. Oh, and if you plan to
implement VPN tunnels fromm a client to the DMZ , forget it. It does not
work. There is no VPN ASIC on the DMZ port. They tried to do it in software
and it proved to be way to slow. All and all I prefer the PIX because of
it's scalability and it's flexability. If you are doing a simple install
that only needs firewall protection and VPN access to the inside and a
single DMZ the netscreen 10 and 100 are good products, just don't plan on
growing or scaling up unless your willing to buy new hardware.

-----Original Message-----
From: Aamir Lakhani [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 15, 2001 12:06 AM
To: 'roy'; [EMAIL PROTECTED]
Subject: RE: How about PIX vs Netscreen


I just had a chance to play with the Netscreen 1000, supposedly it does 3DES
at wire speed Gig. Unfortunately it is about $200,000. I don't think too
many people can justify that or ever use that. There is small box is $500
and does 10MB wire speed 3DES (10 IP address lenience or price is a $1,000).
Not bad for a remote office location, I would prefer a hardware based device
over clients for VPNs anyways, it might not be a bad solution. You can
configure the box via command line which almost copies the PIX command line,
or it has a Checkpoint looking GUI also.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
roy
Sent: Sunday, January 14, 2001 9:27 PM
To: [EMAIL PROTECTED]
Subject: Re: How about PIX vs Netscreen





_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to