The two firewalls use different technologies, Gauntlet is a Proxy type of
firewall that intercepts all requests for resources inside your network and
makes those requests for the outside user. That way, the outside user never
has actual contact with the WEB (FTP, SMTP) server. Some (myself included)
find this more secure. You never have to use a DMZ with this configuration.
FW1 on the other hand is more of a traditional FW in that, once it has
found that the request from this user is allowable (passes all your rules)
it forwards the packet to the WEB (FTP OR SMTP) server. The outside user
actually talks directly with your server. Most people use a DMZ because the
outside user is actually connected to your server and if he can compromise
it (s)he is IN your network.
The other reason I chose Gauntlet is it's integration with McAfee
Anti-virus and CyberCop software. With the CheckPoint software you have to
contract with two other firms (Symantec and ISS) for anti-virus and
scanning software and the integration is not as well done (IMHO)
Gary Baribault
At 06:32 PM 11/20/1999 -0500, Jason Murray wrote:
>On Tue, Nov 16, 1999 at 02:12:02AM -0800, [EMAIL PROTECTED] wrote:
> > I've to choose betwen FW-1 et Guantlet and i have no specific comparaison.
> > If someone can help me i will be very thankfull.
>
>Definitely FW-1.
>
> >
> >
> >
> >
> > ________________________________________________________________
> > Get FREE voicemail, fax and email at http://voicemail.excite.com
> > Talk online at http://voicechat.excite.com
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
>
>--
>Jason Murray - jmurray (at) computer (dot) org
>"Against stupidity, the gods themselves contend in vain"
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
