At 4:52 PM +0100 2/25/99, Bernhard Petri wrote:
>We use Checkpoint FireWall-1 as our "general purpose" firewall. I want
>additional protection against external attacks, as for example
>denial-of-service. So I need to install an "frontend firewall" before
>FireWall-1. I think that a dynamic filter ist the right solution, but I
>don't know which product to use. This product shall be safe, stable and
>relatively cheap compared to FireWall-1. It shall support two Ethernet
>interfaces and one WAN interface.
Bernd
You might want to look at a Cisco 2611, which possess, in addition to
traditional packet filtering capacity, an enhanced IOS Firewall software
feature set (available only recently and only in the lower end Cisco
routers) which adds statefull packet filtering capabilities.
To give you an idea of cost and part, I recently got a quote from the lady
below, which is about 25% off list. Since I was going to use both the WAN
ports, 3 CSU/DSU were being considered, one for backup. This particular
unit has a 10baseT interface, which supports both SNMP and you can telnet
to it a monitor status and reconfigure over the net (password protected).
Cisco 2611 WAN Router
CISCO2611 1 Cisco 2611 Dual Ethernet Router, IP Only IOS $ 2,495.00
$ 1,871.25
S26CHL-12.0.2T 1 2600 IOS IP Firewall Plus IPSEC56 $ 2,400.00
$ 1,800.00
WIC-2T 1 2-Port WAN Interface Card $ 700.00
$ 525.00
CAB-SS-V35MT 1 V35 Cable, DTE Male to Smart Serial, 10 ft $ 100.00
$ 75.00
TY3250-01-35 3 Sync Research/Tylink 3250 T1 CSU/DSU V35 $ 1,375.00
$ 2,681.25
CON-SNT-2611 1 SmartNet 8x5xNBD, 1 year $ 392.00
$ 352.80
TOTAL$ 7,305.30
Katie Ives, Sr. Account Manager
NetLink Technologies, Inc.
3333 S. Wadsworth Blvd, Ste. 228-D
Lakewood, CO 80227
(800) 646-6415
Hope this helps ... chris
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
