You can run traffic through a Proxy box before it hits the PIX if URL
filtering is what you want.  Then block all :80 + :443 traffic through the
PIX from anything but the Proxy.  Or whatever protocols it is you want to
URL filter.  This way you get the best of both worlds.

--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/



""Eugene Nine""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> PIX goes up to layer 4, so it won't do things like URL filtering.
> Checkpoint (or other SW) can do higher layer protection but may not be as
> well at the lower layers (due to security holes in the OS, etc)
> Eugene
>
> ""Chuck Larrieu""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Asked sincerely, what advantages do you see in provisions PIX plus
> > checkpoint?
> >
> > Chuck
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
> > [EMAIL PROTECTED]
> > Sent: Thursday, May 03, 2001 2:47 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: Cisco PIX vs Checkpoint FIrewall-1 [7:2878]
> >
> > It depends on your security policy , design and needs  , generally what
we
> > advice our
> > customers is checkpoint + pix together
> >
> > Hatim badr a icrit :
> >
> > > Hi ,
> > >
> > > I would like to know the pluses and minuses of each product .
Currently
> > We
> > > are using checkpoint and I want to convince my management to switch to
> > cisco
> > > PIX firewall .
> > >
> > > Thanks
> > >
> > > Hatim
> > >
> > > ____________________________________________________________________
> > > Get free email and a permanent address at
http://www.netaddress.com/?N=1
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3134&t=2878
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to