Thanks for the feedback. As I mentioned I'm trying to build a case to move to SPLAT going forward and this will be helpful.
Jeremy Lieb CCSE+NGX, CCSE-NGX Firewall Administrator Open Text Corporation 100 Tri-State Intl Parkway Third Floor Lincolnshire IL, 60069 18472679330 ext 4295 -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of pkc_mls Sent: Thursday, September 06, 2007 4:03 AM To: [email protected] Subject: Re: [FW-1] SPLAT versus RHEL 3.0 Jeremy Lieb a écrit : > Good afternoon. I'm trying to come up with some compelling reasons to > switch from pure Enterprise Linux for our firewalls and Smart Center to > SPLAT. I've been playing around with SPLAT for months and much prefer it > to the standard RHEL Checkpoint installation but I'm running into static > from my supervisor. He believes there are huge dangers due to the NIC > driver and driver support in general. Can anybody give me some opinions > one way or another on which is the preferred method. I think I know the > answer to that. From what I've seen and heard Nokia and SPLAT in one > shape or another seem to be the majority of installs. Am I right in that > thinking? > > Our Checkpoint vendor has been trying for a few years now to convince us > to change to SPLAT. I totally agree. The last straw was some memory > issues on a few of our clusters apparently caused from some patching of > our regular RHEL OS. > > Any info or feedback will be greatly appreciated. Even if it is against > SPLAT :-) > > hi, there are pros and cons regarding using or not using splat. the cons are IMHO : - drivers - you cannot install some specific stuffs - the HCL is not that big. pros : - fully integrated - most all features you need for the firewall are included. - you have a nice web gui (is it a pro or a con ...). You can also find some other pros and cons to RHEL3. The only issue I had so far was that with real linux issues, it's not easy to get a proper response from checkpoint. I had it several times when a configuration was quite strange (interface not active after boot, snmp didn't work good), and sometimes you have to look for a workaround because the only solution proposed by checkpoint is to reinstall the whole stuff. > Thanks > > Jeremy Lieb CCSE+NGX, CCSE-NGX > Firewall Administrator > > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
