[derspot]

Don't forget the cost of the ISA Windows license.

Sure, with CP we forgot the Nokia IPSO/Devide license aswell.

ISA is not as trouble-free a setup as some people think. For one, to make everything work, you need to install their "firewall client" software on each client. That's another piece of client software you have to maintain and the user can screw with.

So the SecureClient is. However the Firewall Client is GP Deployable - so no problems. You dont need it if you dont want User auth. That is its main feature - User Auth for any traffic. How exactly this is done in CP ?

But it's not really a client-side firewall, it just makes ISA work right with the more complex protocols. For remote access users, you then need to throw in the costs for a real software firewall to protect your laptops (purchase/install/another vendor, etc.) ISA can proxy FTP - if that is what u have in mind - even without the client. It is easier with it. The Win Built-in Firewall pretty much does the work for controlling traffic as it relates to the client. ISA will control all VPN access aswell so WTF ? .

ISA does NOT support AES encryption, it only has 3DES. This is very processor intensive for both the server and the client. It does not support data compression on remote access connections, as does SecureClient. When people see slow remote connections, nobody is going to think that it was a great deal to go with a cheaper product.

Data compression ?!?! Users noticing the difference ??!! I would take a look at my bandwidth before relying on software compression. Hummm Encrypting and Compressing at the client - that can pretty much compensate for saved bandwidth ?!?!

I don't know why anyone needs a secondary SmartCenter unless they have a really large operation with lots of firewalls. In a distributed environment, the firewalls keep right on working for awhile (hours if not days) when the SmartCenter is down.

Well if you wanna spend 10K for fun.





Oh My