advantage and disadvantage between iptables and ISAServer?

advantage and disadvantage between iptables and ISAServer?

[Monty Ree]

Hello, all.

I would like to know the advantage and disadvantage between iptables and 
ISAServer(www.isaserver.org).

Anyone who has used ISAserver for firewall?
What's the advantage and disadvantage about ISA against iptables? 

Any comments or any documents(BMT..etc..), so thanks.


Thanks in advance.

_________________________________________________________________
책상위에 다리 올리고 느긋하게 즐긴다... MSN 온라인 상영관   
http://vod.msn.co.kr  

Re: advantage and disadvantage between iptables and ISAServer?

[Michael Gale]

Performance / Stability ?

I am not to familure with ISA because the M$ admins here tell me it is not worth
the enough to test it out. I would assume it is like any other M$ product though
... you need double or triple the hardware to run it as compared to iptables.
You are stuck with the options the M$ provides instead of the endless
possibilities the a Unix or Linux could offer.

But I will give Microsoft this ... they make a nice user friendly desktop OS
that my mom can use.

Michael.


On Tue, 24 Feb 2004 09:00:33 +0000
"Monty Ree" <chulmin2@hotmail.com> wrote:

> Hello, all.
> 
> I would like to know the advantage and disadvantage between iptables and 
> ISAServer(www.isaserver.org).
> 
> Anyone who has used ISAserver for firewall?
> What's the advantage and disadvantage about ISA against iptables? 
> 
> Any comments or any documents(BMT..etc..), so thanks.
> 
> 
> Thanks in advance.
> 
> _________________________________________________________________
> 책상위에 다리 올리고 느긋하게 즐긴다... MSN 온라인 상영관   
> http://vod.msn.co.kr  
> 
> 
> 
> 
> 
> 


-- 
Michael Gale
Network Administrator
Utilitran Corporation

[OT] Re: advantage and disadvantage between iptables and ISAServer?

[Antony Stone]

On Wednesday 25 February 2004 3:49 pm, Michael Gale wrote:

> I will give Microsoft this ... they make a nice user friendly desktop
> OS that my mom can use.

Apple arguably do a better one.

Antony.

-- 
There are two possible outcomes:

 If the result confirms the hypothesis, then you've made a measurement.
 If the result is contrary to the hypothesis, then you've made a discovery.

 - Enrico Fermi

                                                     Please reply to the list;
                                                           please don't CC me.

Re: advantage and disadvantage between iptables and ISAServer?

[Maciej Soltysiak]

> I am not to familure with ISA because the M$ admins here tell me it is not
worth
> the enough to test it out. I would assume it is like any other M$ product
though
> ... you need double or triple the hardware to run it as compared to
iptables.
Agree, oh, this is true. Currently w2k3 runs very bad on:
p4 1,5ghz, 384MB
with a few of the services setup: AD, WMS, IIS (HTTP+FTP), SUS, SMS.


> You are stuck with the options the M$ provides instead of the endless
> possibilities the a Unix or Linux could offer.
Well, sort of. iptables is very powerfull, but I think that upcomming isa
2004
is going to be modular and pluggable too, plus it will certainly address
popular
security issues like: p2p (yes, it is a security issue), worms, network
attacks
that have signatures: slammer, floods, land, dos, etc...
Like checkpoint's SmartDefense.


I have not been using isa, but only read and seen a presentation of isa
2004,
It is possible that is going to be a powerfull tool. No information about
stability,
propably it'd depend on which version of windows you are running and how
stable it is. Performance? No idea.

Regards,
Maciej

Re: [OT] Re: advantage and disadvantage between iptables and ISAServer?

[Tim Evans]

On Wed, 25 Feb 2004 16:07:58 +0000, Antony Stone wrote
> On Wednesday 25 February 2004 3:49 pm, Michael Gale wrote:
> 
> > I will give Microsoft this ... they make a nice user friendly desktop
> > OS that my mom can use.
> 
> Apple arguably do a better one.

But does Mom want to build a firewall?
--
Tim Evans, TKEvans.com, Inc.    |    5 Chestnut Court
tkevans@tkevans.com             |    Owings Mills, MD 21117
http://www.tkevans.com/         |    443-394-3864
http://www.come-here.com/News/  |    

Re: [OT] Re: advantage and disadvantage between iptables and ISAServer?

[Antony Stone]

On Wednesday 25 February 2004 4:18 pm, Tim Evans wrote:

> On Wed, 25 Feb 2004 16:07:58 +0000, Antony Stone wrote
>
> > On Wednesday 25 February 2004 3:49 pm, Michael Gale wrote:
> > > I will give Microsoft this ... they make a nice user friendly desktop
> > > OS that my mom can use.
> >
> > Apple arguably do a better one.
>
> But does Mom want to build a firewall?

If she does, she can use Linux like the rest of us, and not have to deal with 
corporates like Apple and Microsoft....

Antony.

-- 
G- GIT/E d- s+:--(-) a+ C++++$ UL++++$ P+(---)>++ L+++(++++)$ !E W(-) N(-) o? 
w-- O !M V+++(--) !PS !PE Y+ PGP+> t- tv@ b+++ DI++ D--- e++>+++ h++ r@? 5? 
!X- !R K--?

                                                     Please reply to the list;
                                                           please don't CC me.

RE: advantage and disadvantage between iptables and ISAServer?

[bmcdowell]

I don't see them as all that comparable, and in fact I use both.  ISA makes a great proxy and uses AD permissions (groups, etc) for access control.  I see it as Proxy 2.0 Enhanced, rather than a 'firewall'.


Bob

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Maciej
Soltysiak
Sent: Wednesday, February 25, 2004 10:18 AM
To: netfilter@lists.netfilter.org
Subject: Re: advantage and disadvantage between iptables and ISAServer?


> I am not to familure with ISA because the M$ admins here tell me it is not
worth
> the enough to test it out. I would assume it is like any other M$ product
though
> ... you need double or triple the hardware to run it as compared to
iptables.
Agree, oh, this is true. Currently w2k3 runs very bad on:
p4 1,5ghz, 384MB
with a few of the services setup: AD, WMS, IIS (HTTP+FTP), SUS, SMS.


> You are stuck with the options the M$ provides instead of the endless
> possibilities the a Unix or Linux could offer.
Well, sort of. iptables is very powerfull, but I think that upcomming isa
2004
is going to be modular and pluggable too, plus it will certainly address
popular
security issues like: p2p (yes, it is a security issue), worms, network
attacks
that have signatures: slammer, floods, land, dos, etc...
Like checkpoint's SmartDefense.


I have not been using isa, but only read and seen a presentation of isa
2004,
It is possible that is going to be a powerfull tool. No information about
stability,
propably it'd depend on which version of windows you are running and how
stable it is. Performance? No idea.

Regards,
Maciej

Re: [OT] Re: advantage and disadvantage between iptables and ISAServer?

[Arnt Karlsen]

On Wed, 25 Feb 2004 16:24:45 +0000, 
Antony Stone <Antony@Soft-Solutions.co.uk> wrote in message 
<200402251624.45744.Antony@Soft-Solutions.co.uk>:

> On Wednesday 25 February 2004 4:18 pm, Tim Evans wrote:
> 
> > On Wed, 25 Feb 2004 16:07:58 +0000, Antony Stone wrote
> >
> > > On Wednesday 25 February 2004 3:49 pm, Michael Gale wrote:
> > > > I will give Microsoft this ... they make a nice user friendly
> > > > desktop OS that my mom can use.
> > >
> > > Apple arguably do a better one.
> >
> > But does Mom want to build a firewall?
> 
> If she does, she can use Linux like the rest of us, and not have to
> deal with corporates like Apple and Microsoft....

.."If".   ;-)   She has to get one somehow, no?  ;-)

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.

RE: advantage and disadvantage between iptables and ISAServer?

[Lasse Pettersson]

I agree

ISA works very well as a proxy, not that good as a FW



-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org] On Behalf Of
bmcdowell@coxhealthplans.com
Sent: den 25 februari 2004 22:29
To: netfilter@lists.netfilter.org
Subject: RE: advantage and disadvantage between iptables and ISAServer?


I don't see them as all that comparable, and in fact I use both.  ISA
makes a great proxy and uses AD permissions (groups, etc) for access
control.  I see it as Proxy 2.0 Enhanced, rather than a 'firewall'.


Bob

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Maciej
Soltysiak
Sent: Wednesday, February 25, 2004 10:18 AM
To: netfilter@lists.netfilter.org
Subject: Re: advantage and disadvantage between iptables and ISAServer?


> I am not to familure with ISA because the M$ admins here tell me it is

> not
worth
> the enough to test it out. I would assume it is like any other M$ 
> product
though
> ... you need double or triple the hardware to run it as compared to
iptables.
Agree, oh, this is true. Currently w2k3 runs very bad on:
p4 1,5ghz, 384MB
with a few of the services setup: AD, WMS, IIS (HTTP+FTP), SUS, SMS.


> You are stuck with the options the M$ provides instead of the endless 
> possibilities the a Unix or Linux could offer.
Well, sort of. iptables is very powerfull, but I think that upcomming
isa
2004
is going to be modular and pluggable too, plus it will certainly address
popular security issues like: p2p (yes, it is a security issue), worms,
network attacks that have signatures: slammer, floods, land, dos, etc...
Like checkpoint's SmartDefense.


I have not been using isa, but only read and seen a presentation of isa
2004, It is possible that is going to be a powerfull tool. No
information about stability, propably it'd depend on which version of
windows you are running and how stable it is. Performance? No idea.

Regards,
Maciej