I honestly, don't quite follow where the conspiracy theory thing fits in. I
asked myself, and he doesn't follow it either ;-)

I don't know why it would necessarily be a "bad" thing if it is used in the
PIX, or a router, or a switch, etc. In offline conversation, someone
mentioned PR reasons, and while I never like them, I suppose there could be
some validity there. 

The original point of this tangent, IIRC, was in regards to statements of
"firewalls are only as strong as the OS". Whether that OS is W2K, .NET, NT,
Solaris, Linux, IOS, PIX OS, CatOS, Xenix, QNX, BSD, LynxOS, or any other OS
someone feels like adding to the list, the statement is still valid. My only
point in this thread, lost long ago, was simply that. Not whether Cisco ran
other RTOSes or not, but simply that the statement is pretty much a
universal truth, not some ISA specific issue (I really do think that
numerous people on this list can not separate W2K from anything, much less
ISA and IIS).

I think part of the problem is that people (me included) said they thought
that there were at least some other RTOSes that Cisco used, but weren't sure
in what products they might appear. Unfortunately, Brian came out decrying
it as a "legend", when there are a number of press releases, as well as a
few articles that seem to indicate that there is a good chance that at the
least the router, content switches and MGX WAN switches use some other RTOS
for at least something. It would have been better, IMHO, to have said
something more like "yes, some Cisco products may well use them, but the PIX
and anything IOS based do not".

My $.02 

Wes Noonan, MCSE/MCT/CCNA/CCDA/NNCSS
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
[EMAIL PROTECTED]
http://www.bmc.com


> -----Original Message-----
> From: Bill McGee [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, April 18, 2002 16:34
> To: Clifford Thurber; Noonan Wesley; 'Brian Ford'; Chris Kirschke
> Cc: Mikael Olsson; [EMAIL PROTECTED]
> Subject: RE: Digital Legends (was: RE: Microsoft ISA server (Was: Re: Repl
> acingmy old PIX Classic))
> 
> Just because we may license one product or another does not, ipso facto,
> mean that it is part of the PIX OS or IOS. Those are completely
> proprietary
> operating systems. I mean, look at our product list. We literally sell
> thousands of products. Many are not IOS or PIX OS based.
> 
> I'd suggest some of you have read one too many conspiracy theories, but
> given the nature of this group (myself included), that would just be a
> PGIO
> (Piercing Glance Into the Obvious.) ;-)
> 
> -bill
> 
> At 03:37 PM 4/18/2002 -0400, Clifford Thurber wrote:
> >We deman an answer!
> >
> >At 02:19 PM 4/18/2002 -0500, Noonan, Wesley wrote:
> >>The of course you have this:
> >>
> >>http://news.theolympian.com/stories/20020304/Business/28667.shtml
> >>
> >>
> >>Wes Noonan, MCSE/MCT/CCNA/CCDA/NNCSS
> >>Senior QA Rep.
> >>BMC Software, Inc.
> >>(713) 918-2412
> >>[EMAIL PROTECTED]
> >>http://www.bmc.com
> >>
> >>
> >> > -----Original Message-----
> >> > From: Brian Ford [mailto:[EMAIL PROTECTED]]
> >> > Sent: Thursday, April 18, 2002 12:11
> >> > To: Chris Kirschke
> >> > Cc: Clifford Thurber; Noonan Wesley; Mikael Olsson;
> >> > [EMAIL PROTECTED]
> >> > Subject: RE: Digital Legends (was: RE: Microsoft ISA server (Was: Re:
> >> > Replacingmy old PIX Classic))
> >> >
> >> > Chris,
> >> >
> >> > Gee whiz.  Maybe I missed it.  Where does it say that QNX is used in
> >> > IOS?  Or PIX?
> >> >
> >> > It's not.
> >> >
> >> > Liberty for All,
> >> >
> >> > Brian
> >> >
> >> > At 10:01 AM 4/18/2002 -0700, Chris Kirschke wrote:
> >> > >http://www.qnx.com/news/pr/may18_98-cisco.html
> >> > >
> >> > >Chris Kirschke
> >> > >Lead Engineer
> >> > >Astreya Partners, Inc
> >> > >[EMAIL PROTECTED]
> >> > >408-790-5900 xt 531
> >> > >
> >> > >
> >> > >-----Original Message-----
> >> > >From: Clifford Thurber [mailto:[EMAIL PROTECTED]]
> >> > >Sent: Thursday, April 18, 2002 9:36 AM
> >> > >To: Brian Ford; Noonan Wesley; 'Mikael Olsson'
> >> > >Cc: [EMAIL PROTECTED]
> >> > >Subject: Re: Digital Legends (was: RE: Microsoft ISA server (Was:
> Re:
> >> > >Replacingmy old PIX Classic))
> >> > >
> >> > >
> >> > >I don't have the link in front of me but I saw a news blurb that
> Cisco
> >> > >licensced QNX in 1998?
> >> > >
> >> > >
> >> > >
> >> > >At 12:27 PM 4/18/2002 -0400, Brian Ford wrote:
> >> > > >Wes,
> >> > > >
> >> > > >I don't know where you heard this legend about  IOS running on
> some
> >> > other
> >> > > >OS....  It is not true.
> >> > > >
> >> > > >IOS is an operating system implemented directly on a hardware
> >> > > >platform.  There is no underlying operating system.  Look at your
> IOS
> >> > > >router for a "Boot Loader"; that's a small IOS kernel (and not a
> third
> >> > > >party OS).
> >> > > >
> >> > > >PIX OS ran many, many, many years ago on top of a real time OS
> >> > (Finesse)
> >> > > >that was developed specifically for the hardware platform that the
> PIX
> >> > > >used at that time.  Today, the PIX OS runs directly on hardware
> (when
> >> > you
> >> > > >look at the actual PIX source code you sometimes see references to
> the
> >> > old
> >> > > >real time OS).
> >> > > >
> >> > > >You may be thinking of one of a number attempts (by third parties)
> to
> >> > > >create a program that runs on Unix that can execute an IOS or PIX
> >> > > >image.  The latest attempt at something like that was the "IOU"
> (IOS On
> >> > > >Unix) project.  I don't know how far that ever got.
> >> > > >
> >> > > >This claim that either IOS or PIX is a version of Unix or running
> on
> >> > Unix
> >> > > >is becoming a kind of annual event.  Maybe someone will claim that
> all
> >> > > >Linux implementations actually runs on one copy of run-time
> Windows NT
> >> > > >v4.0 next?
> >> > > >
> >> > > >Liberty for All,
> >> > > >
> >> > > >Brian
> >> > > >
> >> > > >At 08:15 AM 4/18/2002 -0700, [EMAIL PROTECTED]
> wrote:
> >> > > >>Message: 6
> >> > > >>From: "Noonan, Wesley" <[EMAIL PROTECTED]>
> >> > > >>To: "'Clifford Thurber'" <[EMAIL PROTECTED]>,
> >> > > >>         "'Mikael Olsson'" <[EMAIL PROTECTED]>
> >> > > >>Cc: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> >> > > >>Subject: RE: Microsoft ISA server (Was: Re: Replacing my old PIX
> >> > Classic)
> >> > > >>Date: Wed, 17 Apr 2002 09:12:38 -0500
> >> > > >>
> >> > > >>A sizable chuck of Cisco (don't know for sure on the PIX, but I
> know
> >> > on
> >> > > >>their routers) runs an OS behind the scenes that is called Xenix,
> XNS,
> >> > ZNS,
> >> > > >>or something along those lines (I really don't recall the actual
> >> > name). IOS
> >> > > >>runs on top of that (is my understanding, kind of like how Banyan
> ran
> >> > > on top
> >> > > >>of Unix). My point was simply, if one is going to cast the "a
> firewall
> >> > is
> >> > > >>only as strong as the underlying OS" stone, they need to be
> prepared
> >> > to
> >> > > cast
> >> > > >>that stone at virtually every firewall out there. It is hardly a
> ISA
> >> > > >>specific issue (heck, FW1 runs on MS doesn't it?).
> >> > > >>
> >> > > >>Wes Noonan
> >> > > >>[EMAIL PROTECTED]
> >> > > >>281-208-8993
> >> > > >
> >> > >
> >> > >_______________________________________________
> >> > >Firewalls mailing list
> >> > >[EMAIL PROTECTED]
> >> > >http://lists.gnac.net/mailman/listinfo/firewalls
> >>_______________________________________________
> >>Firewalls mailing list
> >>[EMAIL PROTECTED]
> >>http://lists.gnac.net/mailman/listinfo/firewalls
> >
> >_______________________________________________
> >Firewalls mailing list
> >[EMAIL PROTECTED]
> >http://lists.gnac.net/mailman/listinfo/firewalls
> 
> __________________________________________________________________________
> ____________
> Bill McGee, CCNA
> 
> Cisco Systems, Inc.
> VPN and Security Business Unit
> Global Channels Manager
> Security Evangelist
> 
> [EMAIL PROTECTED]
> Phone: 801.319.5584
> Pager: 800.365.4578
> 
> Make your Cisco network "SAFE"
> http://www.cisco.com/go/safe/
> __________________________________________________________________________
> ____________
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to