PIX is horrible to admin particularly if you have many. It is not a true proxy (deep inspecitn engine) IMHO, so is fast but less secure. Supposed to be incoroporating the remote admin into the same tool used for other Cisco Kit (name escapes me) which should make things a little nicer/tidier. If you are already a Cisco shop then there are advantages skillset and discount wise. Checkpoint has the advantage of being nicer to admin (well NG is anyway). It is used by lots of people. It obfuscates it's inner workings to the point where it is often difficult to know what is happening (not a tranparent model). Sometimes packet manipulation can only be put down to 'black magic'. Trouble shooting is therefore ticky. If you run the software version (ie on a SUN) you have to think about hardening and managing the OS too. Nokia appliance would be a better soution, it would be faster too. Oh and there is no doubt a backdoor in it for Mossad ;-) Having said all of that I use niether. Well actually I do for some legacy stuff but do not implement aby new systems with either. Just my $.02 worth ;-) JM On Fri, 2004-04-16 at 11:58, Tim John - Domainz wrote:

Hi all,

Can anyone recommend a reseller of Checkpoint software as I need a quote for upgrading.

Also, does anyone have any experience between Checkpoint and PIX platforms ? I have very little experience of either so some 'pro' and 'con' arguments would be really helpful to me.

Cheers,

Tim _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog -- -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org

mQGiBD2JfrwRBACWgDlX/IoNxdk15KpELdl6Sou4cU0sbaBinYV7X12SoR3YljuM lJlhgtoahIdUkqOuvDmX1AUNY2a80sidbTA48B0QUzYrGnktPoBxz4O29LKm49t3 Ojoqj0AsnC6HB37N5pScATqMbXME8hkjACHvukSUvgjHiPRYaMz7WQ2W0wCg3t09 ErzU4f+J+8fExfcd8B1+ce0EAIsc5GlVeK6hTBf3XyTRFbLD0C2m+BZGamrpngmb ito2vhKxbxTHLR/Qy2nbvN4bT42CCnf4v5MguPepqbMT8V6hxXKxxUzJx3A67x6m 7e0Qag4TLopc7f7mY5bTk1yY2mjAg1b+uVEuxMxGVtFkm586aOpmQVfAAgtffsrl CLTlA/94q8gjqHk8A9funzsjlZKft1+Z+NpGObfw9M9cC7c8RJAdK8kusH7/oKb2 Yq9NsSSdULJiqZaKkH4aCV55yvDnF3b6BZQOGvqpYuSACSJoX+fEwASGL0Qq0Jym ykaxwyNKqvUdxuYb9TPU01O3OpTyAvI0DsyjJ+KGS9h9mZwPX7QtSmFtZXMgTWFo ZXIgKGg0eDByKSA8c2NvdXNlckBwYXJhZGlzZS5uZXQubno+iF0EExECAB0FAj2J frwFCQPCZwAFCwcKAwQDFQMCAxYCAQIXgAAKCRAlRgQ5B5O8vFi8AJsG0xt5FRG1 F10FJFblBhmtc4//vwCgnUmaClr8+F+qe4Rm9wnYqWyjF4S0JUphbWVzIE1haGVy IDxqYW1lcy5tYWhlckBpcmQuZ292dC5uej6IXQQTEQIAHQUCPYmWnwUJA8JnAAUL BwoDBAMVAwIDFgIBAheAAAoJECVGBDkHk7y8MvUAnRxhOIq1IAo239VFcBfN2IdZ XEehAJ9U0BB2ZZ8PjNWI1yvjzJ5P3B5lv7QhSmFtZXMgWCA8c2NvdXNlckBwYXJh ZGlzZS5uZXQubno+iF0EExECAB0FAj22c0sFCQPCZwAFCwcKAwQDFQMCAxYCAQIX gAAKCRAlRgQ5B5O8vNLkAKDZ4x+lDWYoBPVViuX37Tbd51golgCgiciBW3djy3wV 11Jdz3x38O5JwRW5Ag0EPYl+yhAIAL7K7wrwGjvgRRS+rh5hW8JJbrYQn0BvajTs Vm/OvtA5QdJN1zqBNBlGCM1OivxASjAZEmpUYMAnBcUjNicXaIu/WoB0AUPSmkZ7 4NHyWoU12cbHZw6pZno4OZ9DpwSIsOkaP5rDB8oaj9b9/nziuxBm3oqmKN64ohcN oSOFJ/4+66vEDM8I1p+4pvb2Jj5JYRS/5+piJEaBUFttHofRWkF34vnxR3c+MjY7 NSVWbu3EWtJV+se+MLeSdDZxzt4v7XD7wE/lt9xq9IlyOryQvRhqrduaYc0ABItd eashGzyDXeUCFhsyFszZG51cAP6FiYQiD9ztwNHUKhLzjcqDJTMAAwYIAL1D9sdU 8+BI3jH1HhPiM8VLq1zii8ksRw77iUthpfe7xMp8qhiachMdXnIMYlIskEiFP3nt BycQlPYBNOV96YEhnBngiBXbC40xgxXSkpJh24Fu6GbXAlLMnahkQeRSMjAcDJuh bNcYfwm+PE86g9XyLCDVByzSQ+bRY7Dof+Sjgtod4Ds4tYA3R3qgYE0Co1dtrf4z b58PlnaSAq9wVtMD0G8Da/n5MC8jsAcHZahfBqmwvKsGENH8zFVwsAeKDjQv075m tO+V96QxCMYuvJeVWWYvL/bIR2zya9yD6RCWds1IBljUIwLI+Ox4Dd3LfBT1Y2g3 x8DNsYXPOCPYWCyITAQYEQIADAUCPYl+ygUJA8JnAAAKCRAlRgQ5B5O8vA6DAJ4v ulRjiKp8UZ5iqCSFvboQRoM4zgCcCunR39pnorxd2ZxIi+miFuPx75U= =siNl -----END PGP PUBLIC KEY BLOCK-----