Isn't fw1 really a stateful packet filtering solution as apposed to a proxy solution like the old gauntlet?
Thanks, Ron DuFresne On Tue, 16 Apr 2002, Noonan, Wesley wrote: > All 3 are good firewalls. It depends on what you are looking for. Do you > want a packet filtering firewall (tends to be faster), then the PIX is a > good choice. Depending on the amount of users, you can go with a PIX 515 or > above. Do you want more proxy/application filtering capabilities? Then both > ISA and FW1 are good choices. Any debate between the two is likely a > religious war (with lots of M$ thrown in, I suppose because they don't have > anything credible against ISA...) > > > > HTH > > > > Wes Noonan, MCSE/MCT/CCNA/CCDA/NNCSS > > Senior QA Rep. > > BMC Software, Inc. > > (713) 918-2412 > > [EMAIL PROTECTED] > > http://www.bmc.com <http://www.bmc.com/> > > > > -----Original Message----- > From: Rink, Jesse [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, April 16, 2002 09:31 > To: '[EMAIL PROTECTED]' > Subject: Replacing my old PIX Classic > > > > Hello, > > > > I have a PIX Firewall from Cisco that is about 4 or 5 years old. It's so > old it doesn't even have a model # and the Cisco techs get confused when I > call because most have never heard of this model. No access lists or > anything. Anyway, the point here is that it's old. > > I'm looking to update my Firewall so I can have features like Intrusion > Detection, VPNs, etc. Was hoping someone could point me in the rihgt > direction of what firewalls to look at. > > My environment is as follows: > 1 WAN interface (connected to a T1 line to our ISP) > 2 DMZ interfaces > 1 Internal interface > > We could have up to 700 concurrent users going outbound through the > firewall at a given time. > > I was thinking about looking at newer PIXs, Microsoft ISA, and Checkpoint > Firewall. Of course, I'm not sure where to begin. Any recommendations? > > > > PS - Where is the best site to read the current msgs to this mailing list? > I don't like them sent to my email, I'd rather read them from a URL that is > updated as messages are posted. I'm new here... :-) > > > Thanks. > Jesse > > > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation." -- Johnny Hart ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything. _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
