IPTABLES vs Checkpoint

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi tobias, hi all,

> in flexibility. The company definitely becomes more dependent on the pe=
rson
> (or people) who know the system. Untrained personnel would probably not=
 be
> able to cope with it or at least its details. You couldn't buy support
> contracts for it.

I wonder how many "untrained personnel" would be able to admin a Firewall=
=20
whatever it is ;) (fw1 or iptables or else).
Yes for sure with the nice GUI provided by FW1 some "untrained personnel"=
=20
could play with rules easily but is that a good solution ?

There also exist good GUIs for iptables: Firewall Builder
http://www.fwbuilder.org/
it support iptables ipchains ipf and pix based firewalls, it also is a=20
management console which enables you to create the rules on an admin mach=
ine=20
and then "compile" them to the target "language" and then place it on the=
=20
target FW machine via a pubkey auth mechanism ...

So I think the real problem is not really with the GUI, maybe the integra=
tion=20
with VPN can be a problem... because yes FreeSwan is not really user=20
Friendly, though it works well for me and my clients (Linux and Win machi=
nes=20
alike).

And I think in many countries you can also find Linux consulting companie=
s=20
which would be likely to offer services around iptables and FreeSwan=20
management and the like. I am not sure it would be difficult to find one,=
 and=20
the price should not be much more than with a Firewall-1 consultant.

I say this because the company I work for offers just that kind of servic=
es in=20
France.

> Cheers,
> Tobias

Cheers,
Florent
http://www.alphacent.com

- --=20
As we enjoy great advantages from inventions of others, we should be glad=
 of=20
an opportunity to serve others by any invention of ours; and this we shou=
ld=20
do freely and generously.
=09--Benjamin Franklin

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE95fyuQe8gCED8yYERAmnmAJ4rfJceWb3+82Csl6B/sfpPynotdgCgm/+U
2ewmUwcJ0C2S6dsEuR+hgqE=3D
=3Dt7EB
-----END PGP SIGNATURE-----




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux