[willmac]

Thanks for the advice on Solsoft I will take a look.

But whilst I agree Cisco will never help with checkpoint the other way round is always a possibility.

Checkpoint are a software company and do not deal in routing and layer 3.
The software uses the underlying operating system whether it be linux , nokia or windows.
So they are not in competion with Cisco for routing and realise a large proportion of their client base use Cisco routers.


So although for us the first answer is to look at Cisco products for ACLs - checkpoint is still worth a look.
Being able to apply polcies from the same security interface and even review log through the tracker maybe of some benefit.

I take the point about tha lag in the latest code revisons - but this would probably be the case for any vendor other than Cisco.

Also in a large scale environment turn around in upgrading IOS is not fast and generally there is a delay anyway with product revision testing and waiting for any bugs/flaws to be spotted and fixed first anyway.