Re: IPTABLES vs Checkpoint

[Florent AIDE <faide@alphacent.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi tobias, hi all,

> in flexibility. The company definitely becomes more dependent on the person
> (or people) who know the system. Untrained personnel would probably not be
> able to cope with it or at least its details. You couldn't buy support
> contracts for it.

I wonder how many "untrained personnel" would be able to admin a Firewall 
whatever it is ;) (fw1 or iptables or else).
Yes for sure with the nice GUI provided by FW1 some "untrained personnel" 
could play with rules easily but is that a good solution ?

There also exist good GUIs for iptables: Firewall Builder
http://www.fwbuilder.org/
it support iptables ipchains ipf and pix based firewalls, it also is a 
management console which enables you to create the rules on an admin machine 
and then "compile" them to the target "language" and then place it on the 
target FW machine via a pubkey auth mechanism ...

So I think the real problem is not really with the GUI, maybe the integration 
with VPN can be a problem... because yes FreeSwan is not really user 
Friendly, though it works well for me and my clients (Linux and Win machines 
alike).

And I think in many countries you can also find Linux consulting companies 
which would be likely to offer services around iptables and FreeSwan 
management and the like. I am not sure it would be difficult to find one, and 
the price should not be much more than with a Firewall-1 consultant.

I say this because the company I work for offers just that kind of services in 
France.

> Cheers,
> Tobias

Cheers,
Florent
http://www.alphacent.com

- -- 
As we enjoy great advantages from inventions of others, we should be glad of 
an opportunity to serve others by any invention of ours; and this we should 
do freely and generously.
	--Benjamin Franklin

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE95fyuQe8gCED8yYERAmnmAJ4rfJceWb3+82Csl6B/sfpPynotdgCgm/+U
2ewmUwcJ0C2S6dsEuR+hgqE=
=t7EB
-----END PGP SIGNATURE-----