Re: Nokia/Checkpoint firewall

["Joe Ippolito" <joe () joesnet com>]

StoneBeat won't work on the Nokias and Nokia is behind on HA development
compared to Stone Soft.  The Znyx 4-port is not on the Win2K HCL and only 3
of the 4 interfaces worked in an Intel Seattle Mboard when I tried it.  Last
I checked www.znyx.com they had not written a Win2K driver.  The Adaptec
quad card is on the Win2K HCL but the one I have is 64-bit PCI - so you will
need a high-end machine or a large 64-bit to 32-bit PCI-slot hammer :-).

----- Original Message -----
From: Yin To Chu <ytchu () ozemail com au>
To: Starkey, Kyle <Kyle.Starkey () msdw com>
Cc: <owner-firewall-wizards () lists nfr net>; ytchucwo <yin.to.chu () cwo com au>
Sent: Wednesday, February 02, 2000 2:55 AM
Subject: RE: Nokia/Checkpoint firewall


> Kyle :
>
> Can you tell the hardware configuration of the Ultra 250, i.e. memory, no.
> of CPU and CPU speed?
> There is only a Pentium II 450 CPU running FreeBSD 4.0 (optimized by
Nokia)
> in IP650. I read the spec. on Nokia GGSN (GPRS core element) which is
IP650.
> We got HA Ultra 450 server pair running FW-1 and StoneBeat? May save a lot
> of money and space if Nokia box is that fast. Suppose the HA module works
on
> Checkpoint 2000.
>
> I hope the cPCI ZNYX 4-port NIC for IP650 can do host based HA networking
> with FreeBSD RAINLink driver. www.znyx.com. I am not sure.
>
> Yinto
>
> -----Original Message-----
> From: owner-firewall-wizards () lists nfr net
> [mailto:owner-firewall-wizards () lists nfr net]On Behalf Of Starkey, Kyle
> Sent: Tuesday, 1 February 2000 15:11
> To: Wang, Daniel; firewall-wizards () nfr net; donwang () angstrommicro com
> Subject: RE: Nokia/Checkpoint firewall
>
>
> Daniel,
> I don't now about the specifics of the hardware inside the Nokia's, but we
> bought IP650 and replaced SUN E250's.  We saw 3 times the packets being
> processed on the Nokia's running the SAME rule set.  I would say that the
> slimlined, BSB kernal is well tuned to inspect and forward packets.  This
> was out of the box and I believe with a bit of policy tuning I can see a
4x
> multiplier on the Nokias.
>
> -Kyle
> InfoSec
> MSDW Online
>
> -----Original Message-----
> From: Wang, Daniel [mailto:daniel_wang () tds com]
> Sent: Tuesday, January 25, 2000 9:41 AM
> To: firewall-wizards () nfr net; donwang () angstrommicro com
> Subject: RE: Nokia/Checkpoint firewall
>
>
> I didn't work with it myself much, but when we tried them here the power
> supplies failed at an alarming rate. We had two replaced under warranty in
> the just the short time we were using it.
>
> I don't know about performance under high load, but FYI the hardware is a
> standard ATX PC motherboard with a P2-300 processor, and the OS is a
> modified version of FreeBSD. You could expect about the same performance
as
> the equivalent PC.
>
> -----Original Message-----
> From: don Wang [mailto:donwang () uac com]
> Sent: Wednesday, January 19, 2000 12:50 PM
> To: firewall-wizards () nfr net; donwang () angstrommicro com
> Subject: Nokia/Checkpoint firewall
>
>
> Hi,
>
> Does anyone have any comments about the Nokia firewall solution which
> uses Checkpoint?  I have looked at the Nokia web site and want to hear
> any field stories that are available.
>
> Thanks,
> Don