Sun Ultra 10 would be fine for for load limits.
Sun Ultra 10, with 300+ MHz, with 256MB (512 preferable).
Sun Ultra-60 would be overkill, but if you have old one lying aroung with 256MB, that
would do just fine.
All logs would go to management station. If you are planning to setup remote sites
managed
by the same management host, then atleast plan for plenty of harddrive limit. Go
atleast
9GB (possibly mirrored, using Sun Disksuite 4.x). Logs can grow high, depending upon
what
you log and how much traffic your Firewall will handle. It is always better to plan on
high harddisk capacity, as you may want to use some third party tools later and that
may
require additional hard disk space.
Just a pointer , when you partition Solaris, try to keep root+/usr partition as high as
possible (say 2GB or so) that will help if your log grows very fast for some reason.
Sometimes firewalls may go bonkers and log tons of stuff, and if you fill root area, it
may crash (imagine if it happens during weekends).
Think about Nokia also, if you are planning remote site firewalling, they are very
handy
in setup.
Rajeev
Marty Saletta wrote:
>
> I'm looking for anyone that can provide
> what they think are the *real* min/optimal
> requirements for running FW-1 version 4.1
> on a Sun. The manual doesn't really get
> specific enough as far as CPU speed and
> the such.
>
> I'm looking to protect maybe 100-200 hosts.
> Right now I'm running a single Ultra-60
> with 256MB RAM. We're not doing NAT or VPN
> yet, but I wouldn't want to rule that out.
>
> We're looking to get an HA/load balancing
> solution (that's another subject), but I'm really
> just looking for the Sun hardware at this point.
>
> I'd like to set up three Suns: two to do the
> FW work and a third one to be the management
> station.
>
> Would an Ultra 10 work ok for the other FW and
> perhaps a small Ultra 5 be enough for just
> the management station duties? Where will the
> log files be stored- the management station?
>
> Thanks-
> Marty
>
> --
> Marty Saletta, System Administrator, Raytheon ITSS Corporation
> NASA Center for Computational Sciences
> Goddard Space Flight Center, Greenbelt, MD
> [EMAIL PROTECTED]
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
--
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
