Dirk, You can use almost any router that has VPN capability. I am not sure you will get much cheaper than the Edge device though. Possibly a small Cisco ASA or Juniper SSG, but the cost would probably be close. The trade off for the cost may not be worth the added overhead. With the Check Point Edge you can connect them to the Smart Center and manage the policy from one place. Using a different vendor would require going to each site individually. If you have only a few sites with a static config it may not be a big deal. Anyway, to answer your question:
1. Juniper SSG 5: create a policy based VPN to the Check Point and watch how you build the encryption domains ( I can elaborate on this if you want). Troubleshooting is fairly easy. If you have to do a snoop then it can be a little confusing. The code is ScreenOS NOT JunOS, so the commands are different. 2. Cisco ASA: use ASDM to build the policy and tunnel. Very straight forward GUI. Not sure about troubleshooting though. 3. Check Point Edge: managed by Smart Center, and logs can be sent to Check point log server. Troubleshooting completely sucks on these things. If you get it working and don't screw with it then they are fine. I don't know what cost is. I would really shy away from a Linksys or Netgear device. I don't believe they have the processing power to do a AES-256 SHA vpn and stream video. Plus, if the sites grow with time you will be right back where you started looking for a more robust solution. Just my $.02 David. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]] On Behalf Of Verweyen, Dirk Sent: Thursday, July 01, 2010 3:53 AM To: [email protected] Subject: [FW-1] VPN-Router Hi, which routers can i use to build a vpn to an r70 -Gateway. We uses some Edges, but I need a simple and cheaper solution to connect some external cameras and other machines. Has anyone make some experience with other Routers? Regards, Dirk Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
