Hello Dave,
I don't have any experience with the WebShield E_ppliance but I have seen a
similar product from Nokia. Actually, it runs the exact same WebShield
software/scanning engine but on the Nokia HW platform. I have seen some
performance numbers showing that the Nokia outperformed the E_ppliance in
SMTP scanning by a fair amount. I don't have the numbers in front of me but
I can dig them up again. I know that you're more concerned with the HTTP
proxy and I'm not sure how they compare on this point.
I do know that the Nokia HW is beefier than what you've described below. It
uses a 600MHz PIII with 768MB RAM. It also has an 18GB, 10k rpm SCSI drive.
I was told last week that they started taking orders for them but they
won't be available until mid-December sometime. Its not a firewall though.
This box's only mission in life is to scan and clean viruses. Uses all the
same DAT files from McAfee and is designed to be a bump in the wire instead
of using CVP so its practically transparent to the FW. Its mostly being
marketed as an SMTP scanner due to fact that using the proxies for FTP and
HTTP tended to decrease the performance of the real-time protocols.
Anyway, there's info on Nokia's website about it if you're interested. We
had someone come out and demo a box here since we already have Nokia's for
FW's and overall it was a pretty slick deal. Hope this Helps.
opiesan
Try looking here
http://www.nokia.com/securitysolutions/network/webshield.html
>From: "Libershal, David M." <[EMAIL PROTECTED]>
>To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
>Subject: Seek Feedback on Webshield E_ppliance Firewalls
>Date: Tue, 28 Nov 2000 12:51:16 -0500
>
>We are currently testing a Network Associates Webshield E_ppliance 300
>firewall V1.5 (this is an appliance version of the Gauntlet Firewall
>running
>on a Sun Netra w/360Mhz processor and 320 Meg Memory). Our test network is
>small and I am concerned about possible performance problems in a real
>network.
>
>I have some specific concerns about possible performance problems relating
>to the use of their httpd proxy given the rather small 320 Meg memory.
>Besides telnet and ftp, we would expect to se http proxies used a lot on a
>Model 320 (similar websield system that provides failover) on the target
>production network. Is this a real concern given your knowledge of the
>system?
>
>Does anybody have any real-use feedback on this system? Is this a httpd
>proxy question a real concern given your knowledge of the system?
>
>I haven't seen any comment on the Webshield and little on the Gauntlet in
>this forum. I'd appreciate any feedback on this product.
>
>Thanks in advance,
>Dave Libershal
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
_____________________________________________________________________________________
Get more from the Web. FREE MSN Explorer download : http://explorer.msn.com
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
