Hello,I am currently running a VSX on Nokia platforms and we have run into a few features and problems that have made me question Checkpoint VSX atleast on a Nokia platform. Checkpoint and/or Nokia has had problems (routes dissapearing when pushing policies, IPsec/VPN using wrong IPs for peer-traffic, VSX VSes using "internal communication network IPs" for routed traffic(which should NEVER happen btw.) with coming up with real answers to our support cases and usually come back with answers stating that it will be supported in a future release or similar...there has also been some talk about migrating from Nokia to SecurePlatform since there seems to be some "issues" with how CP and Nokia co-operate, don't ask any details on that...just my interpretation on the correspondense from our Support organisation/ Nokia/Checkpoint...
All this has made me look around for other platforms and Netscreen ISG-platforms has ahd some pretty good reviews from what I have found...and our Juniper-reseller is ofcourse bragging about all the Checkpoint-to-Netscreen migrations that has been happening lately, seemingy related to licensing costs but also to stability...
-kimh On Sep 3, 2007, at 10:40 AM, sin wrote:
Kim Halavakoski wrote:Hello,I am curious about the Juniper Netscreen virtualization features. Does anybody have experience in running ISG VSes in highly critical environments? Does it work well? Stable enough to run on critical systems or is one better off running highly critical systems on separate hardware? I have been looking into Checkpoint VSX but that platform seems to be very unmature and I am now looking into what Juniper can offer on the virtualization frontier...anybody care to share experiences?Hi,Although so far I haven't had the chance to run virtual systems on Juniper, I do have some experience with VSX and it's pretty stable once you set it up and don't add/remove interfaces from the firewall every day.I'm curious on how you came to the conclusion that VSX is immature. PS: I'm not a Check Point zealot :) 10x, sin
==================================== Kim Halavakoski www.halavakoski.net [EMAIL PROTECTED] photos.halavakoski.net ==================================== ==================================== Kim Halavakoski www.halavakoski.net [EMAIL PROTECTED] photos.halavakoski.net ====================================
PGP.sig
Description: This is a digitally signed message part
_______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
