From: Richard Dumoulin (richard.dumoulin@vanco.es)
Date: Fri Mar 19 2004 - 09:09:55 GMT-3
The stuff about Checkpoint license renewal every year is cumbersome IMHO,
--Richard
-----Mensaje original-----
De: ihatecisco@att.net [mailto:ihatecisco@att.net]
Enviado el: viernes, 19 de marzo de 2004 12:55
Para: Richard Dumoulin; Nguyen Hoang Long; Tran Kim Phong; 'Ahmed
Mustafa'; ccielab@groupstudy.com
Asunto: Re: QOS on PIX
i am not an expert on security either. But i would take a hardened sun box
with checkpoint firewall over a pix any day of the week. But you still need
good acls (internal/external) even with a firewall.
----- Original Message -----
From: "Richard Dumoulin" <richard.dumoulin@vanco.es>
To: "Nguyen Hoang Long" <ng-hlong@hn.vnn.vn>; "Tran Kim Phong"
<tkphong@globaleis.com>; "'Ahmed Mustafa'" <ahmed.mustafa@sbcglobal.net>;
<ccielab@groupstudy.com>
Sent: Friday, March 19, 2004 3:36 AM
Subject: RE: QOS on PIX
> I am not an expert on security but I have heard bad rumors about PIX
> compared to Netscreen in terms of performance etc ...
> Also regarding IOS firewalls, I thought they were far less good than
> hardware based boxes !!
>
> --Richard
>
> -----Mensaje original-----
> De: Nguyen Hoang Long [mailto:ng-hlong@hn.vnn.vn]
> Enviado el: viernes, 19 de marzo de 2004 9:28
> Para: Richard Dumoulin; Tran Kim Phong; 'Ahmed Mustafa';
> ccielab@groupstudy.com
> Asunto: Re: QOS on PIX
>
>
> PIX is behind Netscreen on that QoS point, but IOS firewall is not.
> If the rumors that VPN concentrator, PIX will be terminated & FULLY
replaced
> by IOS Firewall on high-end router platform, Cisco is not behind
Netscreen.
>
> Onemore, Netscreen price, too expensive, I see it about 2 times that of
> Cisco with equivalent performance.
>
> CCNA/CCNP/CCIE bootcamp
> www.vn-experts.net.vn / www.vnexperts.net
>
> ----- Original Message -----
> From: "Richard Dumoulin" <richard.dumoulin@vanco.es>
> To: "Tran Kim Phong" <tkphong@globaleis.com>; "'Ahmed Mustafa'"
> <ahmed.mustafa@sbcglobal.net>; <ccielab@groupstudy.com>
> Sent: Friday, March 19, 2004 2:44 PM
> Subject: RE: QOS on PIX
>
>
> > Then PIX is still far behind Netscreen !!
> >
> > -----Mensaje original-----
> > De: Tran Kim Phong [mailto:tkphong@globaleis.com]
> > Enviado el: viernes, 19 de marzo de 2004 8:33
> > Para: 'Ahmed Mustafa'; ccielab@groupstudy.com
> > Asunto: RE: QOS on PIX
> >
> >
> > Hi Admed,
> > PIX doesn't support QoS. BTW, you can configure QoS at the gateway
> > router.
> > Thanks,
> >
> > Kim Phong.
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> > Ahmed Mustafa
> > Sent: Friday, March 19, 2004 10:04 AM
> > To: ccielab@groupstudy.com
> > Subject: QOS on PIX
> >
> > What is the best way to configure rate-limiting on servers if they are
> > directly connected to PIX. Does PIX support QOS, if not then what is
> > the best
> > way to confiures some media servers that are connectely directly on PIX
> > DMZ
> > ports to prevent servers from chocking since other traffic such as ftp
> > file
> > transfer, email and others are leaving the network at the same time.
> >
> > Thanks,
> >
> > Ahmed
> >
> > _______________________________________________________________________
> > Please help support GroupStudy by purchasing your study materials from:
> > http://shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> > _______________________________________________________________________
> > Please help support GroupStudy by purchasing your study materials from:
> > http://shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> > _______________________________________________________________________
> > Please help support GroupStudy by purchasing your study materials from:
> > http://shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:36 GMT-3