Hi, I was under the impression if you use Floodgate you are able to use QoS inside the VPN contrary to using an external qos device?
Werner -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Abdul Mukhtar Sent: Monday, October 04, 2004 07:48 To: [EMAIL PROTECTED] Subject: [FW-1] Does CheckPoint Site-to-Site VPN Provide QoS? Importance: High We are currently running CheckPoint FW-1/VPN-1 R55 on our Nokia firewalls, which are configured to deal with Site-to-Site VPN traffic using an Encryption Domain over the Internet. All data traffic gets encrypted on our firewall gateway before it gets decrypted at the other end. The bandwidth of the leased Internet connectivity provided by the local ISP is 512K. My boss feels that the Site-to-Site VPN configured on our firewalls does not provide us with QoS (Quality of Service), as once our encrypted data gets to local ISP Internet routers via the 512K link, then we don't know on what speed the data goes to other the site. He also feels that there is no way for us to tell which routes (on the Global Internet) does our encrypted data take before it gets to the other end. Now he is asking to check with the ISP if they can provide us with Site-to-Site VPNs between our offices, so that the ISP will transfer our data using its VPN tunnels to the other sites. He believes we can get QoS once the ISP takes care of all VPN connectivity, as CheckPoint Site-to-Site VPN does not provide QoS. Does this make sense? And how can an ISP's Site-to-Site VPN service be better than CheckPoint FW-1/VPN-1 Site-to-Site VPN? Rgds, Abdul ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
