From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Maciej Soltysiak" Subject: Re: advantage and disadvantage between iptables and ISAServer? Date: Wed, 25 Feb 2004 17:17:35 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001b01c3fbba$e14cc720$0e25fe96@pysiak> References: <20040225084959.471bb675@mgalepc.utilitran.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org > I am not to familure with ISA because the M$ admins here tell me it is not worth > the enough to test it out. I would assume it is like any other M$ product though > ... you need double or triple the hardware to run it as compared to iptables. Agree, oh, this is true. Currently w2k3 runs very bad on: p4 1,5ghz, 384MB with a few of the services setup: AD, WMS, IIS (HTTP+FTP), SUS, SMS. > You are stuck with the options the M$ provides instead of the endless > possibilities the a Unix or Linux could offer. Well, sort of. iptables is very powerfull, but I think that upcomming isa 2004 is going to be modular and pluggable too, plus it will certainly address popular security issues like: p2p (yes, it is a security issue), worms, network attacks that have signatures: slammer, floods, land, dos, etc... Like checkpoint's SmartDefense. I have not been using isa, but only read and seen a presentation of isa 2004, It is possible that is going to be a powerfull tool. No information about stability, propably it'd depend on which version of windows you are running and how stable it is. Performance? No idea. Regards, Maciej