Help - Search - Members - Calendar
Full Version: CheckPoint
The Planet Forums > Security > Firewalls
hilliked
QUOTE
Hardware Firewall

Definition: A device that allows you to restrict or open access for traffic to your server, by rate limiting traffic, and blocking traffic to and from certain ports. With a hardware firewall you can create access groups to allow specific IPs access to management ports while blocking unauthorized users.

Benefits: Gives you the ability to prevent unwanted or malicious traffic to your server. Checkpoint X16 limited to 16 IP's


Currently using RHEL with APF and manually do my management. Can someone assist me in making the decision if this is will be worth it for me? How good is this product and do others out there recommend it?

i.e. doing a search for CheckPoint in these forums (ThePlanet's add on hardware firewall)...I see two posts on it and only see in the order form what I pasted above. What would make me want to spend the extra money for it? If it's so great why isn't there $89-$189 per month of hubbub about it? Does it have built in smart code to handle DoS and other real-time problems? It might be worth every penny, but I don't know based on what I can find on the web site or in the forums.
BlueFusion
I am not sure about the CheckPoint firewall hardware, but I have been using the Cisco PIX firewall for our private rack in the Houston datacenter. It works wonders. Since APF requires some extra overhead on the system, it causes issues when each server is pushing about 200Mbps of data. The hardware firewall does it on it's own thus the servers require no additional software and no overhead using IPtables.

I didn't look into DoS mitigation in the Cisco firewalls, but I think that the network already has some DoS mitigation systems deployed to help alleviate that issue.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.