Re: Firewall Throughput

[jan () nil si]

> From everything I've heard, the PIX (and the NetRanger) are
> based on a stripped down version of Solaris x86.  Therefore,
> Cisco has definitely crossed the line in claiming that PIX is
> not based on a Unix system.

Just to put an end to this whole discussion, here are some facts ;)))

1. PIX runs an operating system called Finesse, which is small, multithreaded,
    and not UNIX-like, at least in user-space; a Finesse user can configure the
firewalling
    subsystem, view the process table, view some system stats, upgrade the
system,
    an not much else in userland.

    In my opinion, it would be close to QNX/VXworks, if you had to compare it
with anything
    (and I am guessing here).

2. NetRanger (oops, the Cisco Secure Intrusion Detection System) sensors do
    run on a hardened && stripped Solaris x86 - without an IP address on the
    untrusted interface :)

Cheers,
Jan

Jan Bervar
Specialist za podatkovne komunikacije, CCIE #2527
Consulting Engineer
NIL Data Communications,  Einspielerjeva 6,  1000 Ljubljana,  Slovenia
Phone +386 1 4746 500       Fax +386 1 4746 501      http://www.NIL.si



_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards