Before talking to any vendor, a site should have at least have written a
justification for a firewall, a security policy. A firewall is usually
used to enforce a security policy of sorts, of course some of the items
listed in a security policy cannot be enforced on a firewall (i.e. All
Employees must wear badges type of thing).. The maintainers or technical
resources at a particular site have a little bit more understanding of the
particular environment that the vendor. The vendors want to sell their
product to you whether or not it solves the majority of your needs or not.
A well thought out compare/contrast worksheet will definitely help you
decide on what particular firewall solution(s) can solve your needs.
Check out some of the FAQS that are available that refer to How to Select a
>Even so, talk to them, and others, about what they recommend, and why,
before you buy.
At 03:30 PM 2/11/98 -0800, Bob De Witt wrote:
>Several thoughts ...
>First, there are several "fast" firewalls out there. Three that come to
>mind are: Check Point's FireWall-1; TIS' Gauntlet; and, Milky Way's SecurIt.
>However, the platform speed has as much to do with throughput as anything
>the firewall vendor does. The higher price platforms usually out perform
>the cheaper ones. It may not be to your advantage to buy a Sun in lieu of
>a PC, but for me ...
>Also, how strong a firewall you need should help decide the result for your
>situation. Speed should be secondary, perhaps? Quality of product does
>not seem to get in the way of profit at MS (the REAL reason I like Apple,
>it makes MS upgrade). The NT platform seems to be more subject to hackers
>than the mature UNIX environment, at least today. Of course, the firewall
>vendors listed above improve the NT system dramatically. Even so, talk to
>them, and others, about what they recommend, and why, before you buy.
>> From vggarcia @
mx Wed Feb 11 15:02:26 1998
>> Date: Wed, 11 Feb 1998 13:08:19 PST
>> From: "Ing. Vicente Garcia" <vggarcia @
>> Subject: high speed firewalls
>> To: firewalls @
>> MIME-Version: 1.0
>> Does anybody know where i can find information of high speed
>> Thank you.
>> Vincent Garcia.
>> Computer Technology
>Ciao, and good luck,
>Bob De Witt,