Hi,
in my opinion one of the main differences is that FW-1 is totally
symmetric and pix isn't symmetric, i.e. pix makes a difference between
outside and inside by default. This might be ok for many installations
connecting a LAN to the internet. But even in this case you have to work
hard to define rules allowing incoming traffic, at least compred to
FW-1.
With FW-1, there is, with the exception of the definition of the
external interface on single gateway modules, no assumption for inside,
outside or dmz interfaces. Hence there are nearly no limitations for the
applicability of fw-1. You don't have to make a well designed proposal
before installation. This might be not interesting a first sight,
because one can argue that it is the work of a consulting partner to
think about the best solution and not only saying: take fw-1 and it will
work in either case. This is correct, but I made the experience that
many customers change their minds a few months after the installation is
finished. Suddenly they want to have more interfaces in their fw or they
want to make some interesting nat games...
In this case fw-1 is unbeatable in my opinion. I haven't seen a
situation where fw-1 was not able to handle the needs of the customer.
There are other things, I don't like in the pix, but the above mentioned
is the most important for me.
regards
Heiko
[EMAIL PROTECTED] wrote:
>
> Hi there,
>
> can anyone give me some good arguments or good references to use when trying
> to convince someone that Checkpoint is better than Pix?
>
> With regards,
> Arnor Arnason
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
--
Dr. Heiko Ploehn AM Professional Services GmbH
Tel.: 089-614589 30 Rotwandweg 5a
Fax.: 089-614589 59 82024 Taufkirchen
email [EMAIL PROTECTED]
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
