Great Circle Associates Firewalls
(February 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Solstice Firewall 1 version 2.1
From: jonesmd @ unifiedtech . com (Mike Jones)
Date: Fri, 14 Feb 1997 09:44:28 -0500
To: firewalls @ greatcircle . com, bjorn . vuokivi @ bmh . se

> I am planning to install Solstice Firewall 1 version 2.1 and my questions 
> are
> Should I use Solaris 2.5 or Solaris 2.51 with sun4c architecture?
> Is there any patches to the Firewallsoftware?
> What services should I remove from the OS, I planned only allow SMTP and 
> HTTP services threw the Firewall.
> The last question for now is which window system should I use, Openlook or 
> CDE?

I work for a system integrator who resells Sun hw/sw, and we've done a
bunch of FW-1 configs. My suggestions?

1. Use 2.5.1. It's more stable and performs a bit better.

2. Not that I know of, at least for version 2.1.

3. I would remove *all* services from the firewall itself unless you
*really* need them. You can administer the firewall remotely using the
FireWall-1 remote GUI, which uses an encrypted tunnel to communicate with
the firewall.

4. I'd use OpenLook, just because it's smaller than CDE and puts a little
less load on the machine. It really doesn't matter very much.

--
	Mike Jones
	Sr. Network Computing Advisor
	UNIFIED Technologies

Indexed By Date Previous: Re: Pointcast - how to block....
From: jonesmd @ unifiedtech . com (Mike Jones)
Next: Re: Charge-Back -answer
From: Ewout Meij <BSD02 . EMEIJ @ anaf01 . amsterdam . nl>
Indexed By Thread Previous: Re: Solstice Firewall 1 version 2.1
From: James Wang <ming @ math . uh . edu>
Next: RE:Solstice Firewall 1 version 2.1
From: mcwilkin @ twcable . com

Google
 
Search Internet Search www.greatcircle.com