inline comments.
On Mon, 5 Feb 2001, Jason Costomiris wrote:
> : For example, you cannot add software to assist the management of routes
> : without paying for it. Not like dynamic routing has any place on a
> : firewall, but that's just an example of the closed nature of the Nokia
> : product.
>
> Completely untrue. There is an unsupported program, available through
> the knowledge base called "addstatic". It's function is to make it easy
> to add static routes to a unit.
>
I think we are failing to notice the difference between statis and
dynamic:))
> : On the downside, if you are an expert in UNIX, you can't configure the
> : thing.
>
> Again, not true.... There's no reason you can't configure it via the
> CLI. Don't expect to be supported, but there's no reason you can't do that.
>
But if you configure the solaris box, you are still supported. No one
wants to be put into an unsupported situation.
> : In my own opinion, the Nokia product had immense potential that was
> : sidetracked by capitalizing on people who previously overpaid for a
> : massive and overpowered Sun system for their packet-filtering firewall
> : device.
>
> You forgot to mention the fact that IPSO includes built-in HA functions that
> cost thousands of $$ to add to Solaris. You also forgot to mention how much
> easier it is to manage IPSO releases than it is to manage the myriads of
> Solaris patches.
>
Correct me if I am wrong(and I likely am), but isn't the nokia HA solution
just in the routing protocol? I mean VRRP is just the standards based
redundant routing protocol resulting from ciscos HSRP, right? My guess is
that GateD doesn't support this though(yet), so maybe they are a leg up
here. But if you can find a routing daemon capable of supporting
HSRP/VRRP then you could easily implement your own HA(well,.. as HA as
nokia anyway) solution.
>
--
--Paul
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================