I have to, respectively, disagree on the IP350/IP380 model. You can accomplish just about everything with the IP440 (minus the VPN acceration card). The IP350/380 has 3DES built-in encryption card. That card does not support AES encryption (the last time I touched an IP350 was 6 months ago and I was able to confirm this with Nokia TAC in Mountain View). That being said, things might have changed since.
The IP350/380 has a P-III 700Mhz CPU. You can replace the 600Mhz cpu on the IP440 with an P-III 850Mhhz. Standard on the IP350/380 is 256MB. You can load 768MB RAM on the IP440. The maximum interfaces that the IP350 can support is 8. You can have up to 12 interfaces on the IP440. One very important note, you can have RAID 1 on the IP440. That can not be done with the IP350. You can upgrade the IP440 to what I've mentioned above at a very "cheap" price because these are PC components and still have "nokia" support (provided that you have nokia support) because Nokia's policy is "don't ask don't tell). They will not ask you where you get that part as long as the box is running ipso and checkpoint firewall. I would not go with IP350 until I can squeeze every mileage out of the IP440. It is still a very good box. You may not aware of this, but the Cisco Pix firewall and the IP440 have the exact same chasis. Thorsten Behrens <[EMAIL PROTECTED]> wrote: AES is an excellent replacement for 3DES. I would recommend a pair of IP265 (diskless) or IP260 (with disk), and a SPLAT or Win mgmt station. Check the throughput on these first; but they should do fine. They got acceleration for AES-128 and 256 built right in and come with 512MB of RAM standard. I think these will be my new favorite platforms for small-to-medium business "one mgmt and two enforcement in HA" cookie cutter installations :). If you want or need more "oomph", an IP350 with a memory upgrade to 512 (accelerates AES-128, not 256) or an IP380 (up to 1GB, also 128 not 256) would be your choices. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Behalf Of Sean Donaghey/HDGH Sent: Wednesday, February 23, 2005 11:30 AM To: [email protected] Subject: [FW-1] IP440 Equivalent Replacement? I need to replace our IP440, with a new firewall, and I am wondering what would be an equivalent hardware box to replace it running NG-AI R55? Our current IP440 has the Chrysalis LunaVPN card installed in it for VPN acceleration, but I am unsure if I need a 3DES accelerator card in the new one or not. Can AES be a good replacement for 3DES? Thanks, Sean P. Donaghey The information contained in this e-mail message is confidential and protected by law. The information is intended only for the person or organization addressed in this e-mail. If you share or copy the information you may be breaking the law. If you have received this e-mail by mistake, please notify the sender of the e-mail by the telephone number listed on this e-mail. Please destroy the original; do not e-mail back the information or keep the original. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Please note that: 1. This e-mail may constitute privileged information. If you are not the intended recipient, you have received this confidential email and any attachments transmitted with it in error and you must not disclose, copy, circulate or in any other way use or rely on this information. 2. E-mails to and from the company are monitored for operational reasons and in accordance with lawful business practices. 3. The contents of this email are those of the individual and do not necessarily represent the views of the company. 4. The company does not conclude contracts by email and all negotiations are subject to contract. 5. The company accepts no responsibility once an e-mail and any attachments is sent. http://www.integralis.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Do you Yahoo!? Yahoo! Mail - You care about security. So do we. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
