Firemon from SecurePassage and Nokia IPSO 3.7.1

[cciesec2006]

Have a couple of questions:

We currently use FiremonRRC version 2.7 from SecurePassage to monitor
if/when the policy is being pushed to the enforcement module(s). I like
the product a lot.

I have a project that will upgrade from version 2.7 to version 3.5.1.
I look at version 3.5.1 and it seems not as intuitive as version 2.7.
Anyone currently using version FiremonRRC version 3.5.1 would like
to comment on this product.

The other question I have is this: Nokia has retired IPSO 3.7.1 as
of last year. What does it mean to customer who is still running
Checkpoint NG with AI R55 on Nokia appliances with IPSO 3.7.1?
Checkpoint still supports NG w/ AI R55 until at least 2nd Quarter
of 2008.

Comments please? Thanks.

[lodown]

I used Firemon while on 2.7, and went through the upgrade to 3.x. Version 3.x is a complete rewrite, and many of the features found in 2.7 were not brought over to the 3.x version immediately. I was actually pretty unhappy upgrading, as many of the features that were intuitive and beneficial in 2.7 were either left out or difficult to use in the new version. If 2.7 had SPLAT monitoring I would have stayed on that version.

lodown

[cciesec2006]

Hi there,

Thanks for the feedback my friend. I am going to deploy version 2.7 and 3.5.1
in parralel for my NG with AI R55 environments. I will report back the
result.

[RayPesek]

Originally Posted by cciesec2006

What does it mean to customer who is still running
Checkpoint NG with AI R55 on Nokia appliances with IPSO 3.7.1?
Checkpoint still supports NG w/ AI R55 until at least 2nd Quarter
of 2008.

Unless they upgrade to IPSO 3.9 they run the risk of there being a problem in 3.7.1 that won't be fixed and that may bite them. That's probably a small risk given that they will be in the same boat in six months if they do nothing.

Ray