Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Firewall in Routers??

  • From: Glynn Stanton
  • Date: Mon Mar 03 21:15:56 1997

> I know that Bay is doing this with Checkpoint when (or soon after)
> FW-1 3.0 is released. I assume this would make a deal with cisco
> rather difficult, especially considering the way cisco has been
> pushing the PIX box against FW-1.

Just to throw in a little bit more info..

Theres little comparrison between the two.
PIX is more of an address translation unit with firewalling
capabilities.
Firewall-1 is a fully functional Firewall with limited address
translation. 

i.e. PIX has a pool of IP addresses.. true address translation.
Firewall-1 does address 'hiding' making it look to the external world
like all connects come from a single IP.

I tend to prefer to keep routers as routers and firewalls as firewalls,
it reduces the CPU overhead, Problem Determination is easier, and 
configurations are kept in a distinct logical box.
Of course this is at the expense of cost, and space.

Glynn Stanton.


- - - - - - - - - - - - - - - - -




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.