Re: IPTABLES vs Checkpoint

[Nick Drage <nickd@funkyjesus.org>]

On Wed, Nov 27, 2002 at 08:45:08AM +0200, Wayne de Nobrega wrote:

> In my specific case, this company is already running the Nokia solution.
> For the office in my country, the local office does not want to incur the
> cost of $7,000 (excluding ongoing licence costs) to install the solution
> when they can install the IPTABLES version for the equivalent of $1,000
> (h/w, s/w and installation).
> 
> The local firewall will be managed locally and has very simply rules in
> place as they are not running any services behind the firewall. They
> will also not be running any VPN.  It is simply for connecting the local
> office to the Internet, not to corporate.

As long as it's always the local office running the firewall I don't see a
problem with this.  Make sure you've got good hardware support contracts
though, or at least one spare box kicking around, as one of the benefits of
the Checkpoint / Nokia solution is the s/w and h/w support.

> Do you have any more info which explains the architecture of the Nokia
> IP330 and Checkpoint solution so that I can do a more technical comparison
> between the two products.  The information on the Nokia site is typical
> marketing.  I believe the Nokia product runs a customised version of
> FreeBSD.

Your best bet is to contact your local Checkpoint reseller, they will fall
over themselves to provide you with information.

<snip>

-- 
FunkyJesus System Administration Team