Re: Firewall

[Jerome Draper <jdraper@xxxxxxx>]

I setup a Ascend Lucent Superpipe 155 Router that has a firewall built in
as well as VPN (not sure which it supports tho).  This is quite a box as it
has:

        FIREWALL
        DSU/CSU
        ISNN BRI1 and BRI2
        T1
        VPN

The vt100 telnet config is kinda klunky/techy.  A nice feature of this
$1200-$1600 unit is that you can tfpt the configuration to a PC where it
looks like a .ini file.  If the router gets trashed you can tftp the
config.txt back to the router and be in business instantly (nice doc
feature as well).

The firewall has a very nich windows gui interface that allows you to
choose from an extensive list of options.  Ultimately it will save the
firewall config in a .txt file which is then, upon command tftped to the
router.  Once again the firewall config sits in a file on a PC for doc
purposes.

My Flowpoint DSL router (Netopia is same) has both firewall and VPN built
in and cost me $250.  I won't be using the firewall as I have a Linux box
with 2 ethernet cards running IPCHAINS for the firewall.  My internal
network is on one card and hub at the 192.168 addrs while the other card is
on the router with legal internet addresses.

My questions:

Why do people have units that cost $3000 to $5000?  
Why buy a second firewall only unit when it's already in the router?
Why not implement the Linux solution to cover all the bases?

Jerry
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---