From owner-freebsd-security Sat Oct 7 1:23:39 2000 Delivered-To: freebsd-security@freebsd.org Received: from allmaui.com (server25.aitcom.net [208.234.0.10]) by hub.freebsd.org (Postfix) with ESMTP id BFED537B502 for ; Sat, 7 Oct 2000 01:23:37 -0700 (PDT) Received: from allmaui.com (c756043-a.stcla1.sfba.home.com [24.20.23.203]) by allmaui.com (8.8.8/8.8.5) with ESMTP id EAA30893; Sat, 7 Oct 2000 04:23:29 -0400 Message-ID: <39DEDD2B.E5BF4463@allmaui.com> Date: Sat, 07 Oct 2000 01:22:03 -0700 From: Craig Cowen X-Mailer: Mozilla 4.75 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Darren Reed Cc: "freebsd-security@FreeBSD.ORG" Subject: Re: Check Point FW-1 References: <200010070747.SAA26913@cairo.anu.edu.au> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thanks, They are going to put it on an NT machine. They don't trust ipfilter or anything else that is not commercial. Maybe I could get some suits to guarentee it with a corporate label. Craig Darren Reed wrote: > In some mail from Craig Cowen, sie said: > > > > The big cheeses at work want to use check point instead of ipf or any > > other open source solution. > > Can anybody help me with vunerabilities to this so that I can change > > thier minds? > > Tell them that IP Filter is the software which protects Firewall-1 from > the Internet when running on Solaris - you have to go with naked FW-1 on > NT. There are two factors to this equation, however. FW-1 is typically > deployed on Solaris/NT machines although now the Nokia box makes up a > large number of those sales. The Nokia boxes run IPSO which was, long > ago, FreeBSD (I'm told it no longer bears much resemblence). > > Darren > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message