Re: Multiple firewalls from different manufactureres

["Keith A. Glass" <salgak () speakeasy net>]

> -----Original Message-----
> From: Joseph S D Yao [mailto:jsdy () center osis gov]
> Sent: Friday, January 28, 2005 06:10 PM
> To: 'Keith A. Glass'
> Cc: firewall-wizards () honor icsalabs com
> Subject: Re: [fw-wiz] Multiple firewalls from different manufactureres
>
> On Fri, Jan 28, 2005 at 05:00:03PM +0000, Keith A. Glass wrote:
> ...
> > > As Paul said, TANSTAAFFW (there ain't no such thing as a free firewall)
> > > - but what you spend and where and how differs from firewall to
> > > firewall.
> >
> > Yes and no.  You CAN put up a decent firewalling solution using commodity computers, especially the 1-U units (Dell 
> > 1700-series, HP Proliant DL360s, etc. . ) and either Linux, Solaris (now that it's free) or some flavor of BSD, and 
> > the firewall of your choice.  I just wish some of the vendors would allow their FW solution to be available outside 
> > the "appliance" vehicle (Yes, I'm talking about Symantec and Secure Computing. . .)
> >
> > When I was running the firewalls at SEC's EDGAR project, we used a mix of Gauntlets and FW-1, all running on 
> > various flavors of Sun hardware, from old Ultra 5's and 10's to new SunFire 480's (we were in an upgrade cycle, 18 
> > months ago. . )
> >
> > Keith
> > Merrily running systems at Fort Belvoir. . .
>
> Keith, "commodity" hardware still isn't "free"; neither is recycled
> hardware if there is some other possible use for it, or if its age
> causes it to fail earlier than it would otherwise have.  TIS Gauntlet
> and Check Point Firewall-1 still cost something, last I checked [and
> last Gauntlet was available].  And I don't THINK you were donating your
> labour to put together even the free-software packages, eh?  This is
> what I meant, and inferred from Paul's comment, about TANSTAAFFW.
>
> [In all of the above, "free" is intended as in "free beer".]

My point was, you CAN build reliable firewalling solution that does not cost a LOT of money.  And yes, Gauntlet HAS 
disappeared, merging with Sidewinder and showing up as the "Sidewinder G-2" software on Secure's Firewall appliance (a 
1-U Dell Box running a cut-down version of some flavor of BSD. . .and costing far more than it should. . .)


_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards