Great Circle Associates Firewalls
(December 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewall-1, any hints or gotcha's in it's installation??
From: Adam Shostack <adam @ bwh . harvard . edu>
Date: Tue, 19 Dec 1995 15:09:14 -0500 (EST)
To: philips @ textwise . com (Jim Phillips)
Cc: Firewalls @ GreatCircle . COM
In-reply-to: <Pine . SOL . 3 . 91 . 951219092550 . 5119F-100000 @ daisy> from "Jim Phillips" at Dec 19, 95 09:39:51 am

Jim Phillips wrote:

| I'm about to embark on a mission to upgrade my current firewall software 
| from TIS's fwtk to the Firewall-1 from Checkpoint systems.  I've 
| been reading this digest for a while now, and havn't really seen 
| anything about the installation of this product.   Any comments about the 
| installation, or more importantly, any gotcha's that have been observed. 

	Don't forget to harden the underlying OS before installing, a
point which the manual makes no mention of.  I've seen FW-1s running
on a Sun with Sun's shipped sendmail.  Hmmm.  If you're already
running FWTK, you've probably done this, but there are a number of
vendors who say 'our OS is good enough for a firewall.'

Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume



Follow-Ups:
References:
Indexed By Date Previous: Does anyone else see this as a problem?
From: "Sacherich, Larry" <sacherich @ ppg . com>
Next: Re: re Shiva / SecureID
From: Ken Hardy <ken @ bridge . com>
Indexed By Thread Previous: Firewall-1, any hints or gotcha's in it's installation??
From: Jim Phillips <philips @ textwise . com>
Next: Re: Firewall-1, any hints or gotcha's in it's installation??
From: "Bryan D. Boyle" <bdboyle @ maverick . erenj . com>

Google
 
Search Internet Search www.greatcircle.com