Checkpoint Firewall Vs Nokia Firewall

[tdvit]

Checkpoint VPN-1 Edge with 802.11B & G Wireless

Versus

Nokia IP 350


We are moving our sales office and they want wireless in the office so i was thinking of getting one of the Checkpoint edge boxes with its integrated wireless. I have no experience with them so would appreciate some advice. From what I read I can managed it from my mgmt server and it will take a full rule base aswell as doing vpn stuff. Has anyone here gone this way? if so are you happy?

Thanks

[BarryStiefel]

Originally Posted by tdvit

Checkpoint VPN-1 Edge with 802.11B & G Wireless

Versus

Nokia IP 350


We are moving our sales office and they want wireless in the office so i was thinking of getting one of the Checkpoint edge boxes with its integrated wireless. I have no experience with them so would appreciate some advice. From what I read I can managed it from my mgmt server and it will take a full rule base aswell as doing vpn stuff. Has anyone here gone this way? if so are you happy?

Thanks

The general concensus is that those Edge boxes have problems and are to be avoided. I know of at least one reseller who won't sell them anymore.

Sure, the initial purchase price is cheaper than a "real" gateway, but the feeling is that the added support costs and lower functionality make them a bad deal in the long run.

Put in a SPLAT box and have a "real" gateway.

[chillyjim]

Not to disaudie folks from spending more money, but I've had great luck with the Safe@/Edge boxes, at least starting with the 6.0.x code. SecureCleint is still flakey sometimes though (reports only).

[kva.kva]

I agree with chillyjim. New version firmware better than previous. There were some problems with memory's leak, but now they are resolved.

[Sergej]

If you are Nokia shop use Nokia IP 350 - AFAIK the only difference is they are manageable from Horizon manager.

You can take Safe@ Edge from the local CheckPoint partners for test. They must have for sure some NFR units.
Also calculate all the costs hidden in the licenses. I'm not sure if the Safe@ Edge requires site licence if you want to manage it from SmartCenter (from time to time checkpoint changes Safe@ related licenses slightly).

[chillyjim]

If you are looking for SmartCenter management, you want VPN-1 Edge. Safe@ can only be managed locally or from SMP.

IP350's don't have integrated wireless like the Safe@/Edge do, do they?

[tdvit]

Originally Posted by chillyjim

If you are looking for SmartCenter management, you want VPN-1 Edge. Safe@ can only be managed locally or from SMP.

IP350's don't have integrated wireless like the Safe@/Edge do, do they?

unfortunatley not. thanks for all the advice everybody if anything else springs to mind please post here.