PIX Routing
in [Cisco]
|
Prev: DNSSERVER Error.
Next: I NEED TO BUY Cisco ws-x6748ge-tx, ws-sup720-3bxl,ws-sup720-3b, ws-x6724-sfp, ws-x6704-10ge
From: RG on 9 Feb 2010 23:24 This fortigate is pretty impressive. It looks like it is much better put together than pix. "Doug McIntyre" <merlyn(a)geeks.org> wrote in message news:4b1fddca$0$33859$8046368a(a)newsreader.iphouse.net... > RG <rgelfand2(a)gmail.com> writes: >>For purposes of transparent firewall, which one would you recommend >>more Netscreen/Juniper or FortiGates? > > I haven't used the new Juniper SRX's, so I can't say how stable they > are. With Juniper's reputation, and past experience with the Netscreen > and SSG boxes, they should be solid. > > I've been using FortiGate for all my deployments in the past 3 years. > I'd say they are the way to go, very solid and dependable. Huge range > of products, so it may be hard to choose what you need, if you are > talking about a 501, though, a 50B is plenty for your needs. > The bigger ones might be nicer if you need more ports/zones for your > network. > >>I found that cisco pix 501 very descent and solid firewall. It is >>highly configurable and doesn't seem to break. >>Would you say the same about Netscreen/Juniper or FortiGates when used >>in transparent mode? > > Definately. World apart from Sonicwall and the others in their class. > Junpier and Fortinet make good products (like cisco). > >>Also, is Netscreen/Juniper or FortiGates sip aware? > > Yep. SIP and H.232 are fully supported. You do have to configure > things specificly to recognize these protocols, so make sure to read > up on the technotes.
From: Doug McIntyre on 10 Feb 2010 13:25 "RG" <nobody(a)nowhere.com> writes: >This fortigate is pretty impressive. It looks like it is much better put >together than pix. Yep, pretty nice overall I think. I like that they support a huge range of features, the GUI is quite usable on every desktop, only having to bop out to the CLI for a few advanced things, they don't have licensing limitations (although you have to subcribe to AV definition updates, but they are all like that), and are rock solid. Code updates seem to be only for new features and minor bug fixes than any security issues. They support pretty much wirespeed for most setups. I'm going through my list of managed boxes to find the longest uptime. Hmm, I think the uptime counters roll after a time, but the system log messages so only two reboots in 5 years on one of my oldest boxes.
From: RG on 24 Feb 2010 11:48
Would you have the latest firmware for 50b? If yes, would you be able to send me? Thanks in advance On Feb 10, 1:25 pm, Doug McIntyre <mer...(a)geeks.org> wrote: > "RG" <nob...(a)nowhere.com> writes: > >This fortigate is pretty impressive. It looks like it is much better put > >together than pix. > > Yep, pretty nice overall I think. > > I like that they support a huge range of features, the GUI is quite > usable on every desktop, only having to bop out to the CLI for a few > advanced things, they don't have licensing limitations (although you > have to subcribe to AV definition updates, but they are all like > that), and are rock solid. Code updates seem to be only for new > features and minor bug fixes than any security issues. They support > pretty much wirespeed for most setups. > > I'm going through my list of managed boxes to find the longest uptime. > Hmm, I think the uptime counters roll after a time, but the system log > messages so only two reboots in 5 years on one of my oldest boxes. |