North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: [NANOG-LIST] RE: Firewall opinions wanted please - clarification

  • From: Brent Van Dussen
  • Date: Tue Mar 16 18:23:13 2004

Another important question is who is going to be managing the firewall once it gets purchased and installed? Buying a PIX is great but not if you don't have anyone that knows how to use it. This applies to any vendors solution be it Checkpoint, IPTables, PIX, netscreen, etc..

Also by proxy do you mean statefull packet inspection?

-Brent



At 03:07 PM 3/16/2004, Nicole wrote:


As much as I hate to follow up my own post, I suppose I was a bit too vauge
for my own good =]

We do not run any cisco gear and we are in a Class A data facility.

By proxy I did not mean to imply NAT. I cannot remember the proper term but
what I mean is full packet handeling as opposed to packet inspection.

Security is important but the budget limit is only up to about 3K. I have been
trying to get the client a firewall for some time and am just now getting the
go ahead.



Sorry for any vaugeness but I usually like to not say to much as to sway
opinions one way or another and to learn more as any knowlege I have may be
wrong or out of date.



Nicole



On 16-Mar-04 Unnamed Administration sources reported Nicole said :
>
>
>
> Hi
> I am looking for a good but reasonably priced firewall for a 40 or so server
> site. Some people swear by Pix, others swear at it a lot. Also I have heard
> good things about Netscreen. Or any others you would recommend for protecting
> servers on a busy network. Don't really need anything with VPN just the
> standard http, ftp, ssh, https, type traffic up to 100mb throughput.
> From what I have heard a proxy firewall would be best?
>
>
>
> Thanks in advance!!
>
>
> Nicole
>
>