In message <9406020034 .
AA28539 @
hawksbill .
sprintmrn .
com>, Paul Ferguson
writes:
>> One router family I have not seen discussed here is the Xyplex products.
>> Does anyone have any experience(s) to share? I am evaluating them for
>> a new network. So far they appear to be very strong in the reliability
>> arena. The functionality of the security modules (210 Management Processor
>> and the Security Processor (for port level access control) seems pretty good.
>> Unfortunately, my evaluation is of the paper variety and not based
>> on the hardware reality. Comments?
Well sadly I had to use one of these gems to try to set up a firewall
for a customer site. I ended up having to go with a UUCP based
firewall because of all of the problems with the xyplexes. They seem
incapable of specifying a range of ports to block, and they also seem
incapable of stopping source routed packets.
When I spoke to (and ultimately through) tech support, they said they
had engineers working on allowing filtering ranges (no release date
specified), but had no support for stopping source routed packets, and
didn't even think it was an issue.
They look like nice routers, but not for security applications.
-- John
John Rouillard
Senior Systems Consultant (SERL Project) University of Massachusetts at Boston
rouilj @
cs .
umb .
edu (preferred) Boston, MA, (617) 287-6480
==============================================================================
My employers don't acknowledge my existence much less my opinions.
References:
|
|
