Hello,
I know this question has most likely come up a few times and most people ask about performance and through put. But my question seems to me a little different.
I would like to know how people on this list ... which I know might be a biased opinion feel how a Netfilter firewall
box .. properly configured would compare in security to a commercial firewall.
I'd say that security is at about same level, if you keep the products updated to the latest release, and if you do not have applications running on the firewall itself (like you do, squid is appliaction).
Use product that you feel comfortable with, and that has features you need. No point in using Netfilter if it lacks a feature from CheckPoint that you need. Or using CheckPoint if it lacks a feature from Netfilter that you need.
Sadly, at some places that I used to work in the past (luckily not working there anymore), the two main arguments (usually used by higher management) for going commercial was that "if we pay, we will have someboy to blame when things are not working". And "commercial looks more professional". Totally stupid and neither of those has anything with common sense. Hope it will not be the case at your place.
-- Aleksandar Milivojevic <amilivojevic@xxxxxx> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
