benefit of using nokia as compared to SPLAT

[sebastan_bach]

hi everyone could someone just highlight the benefit of suing nokia as compared to the secure platform. i see that most of the features of the NGX are supported in SPLAT but not in nokia. nokia doesn't support the ssl network,extender, VGX gateways till htye got a new box which will support. nokia gives hardware throughput which a SPLAT can't give because it's on a machine. i would like to have a healthy disscussion over this . anyone interested pls post.no offences to nokia users.

sebastan

[aylajark]

Hey!

We are using NokiaIP 1220s with IPSO4.0. IT supports SSL Network Extender.
The main benefits on using Nokia are:
- easy configuration (Nokia Voyager)
- vlan support

[sebastan_bach]

hi there thanks for ur instant reply. does the nokia box support bgp,qos and vsx gateways. is there support for the NGX express cli . i didn't knew it could support SSL network extender.i didn't know that on a normal SPLAT box will not support for vlans unless VSX is used. could u tell me which is the latest IPSO image available which supports all the features of a SPLAT. waiting for ur reply.

sebastan

[Lackie]

Originally Posted by sebastan_bach

hi there thanks for ur instant reply. does the nokia box support bgp,qos and vsx gateways. is there support for the NGX express cli . i didn't knew it could support SSL network extender.i didn't know that on a normal SPLAT box will not support for vlans unless VSX is used. could u tell me which is the latest IPSO image available which supports all the features of a SPLAT. waiting for ur reply.

sebastan

Nokia appliances support BGP, QOS (with Floodgate-1) and VSX gateways (on the IP710 and IP1260). I believe SSL extender is supported in NGX on Nokia. IPSO 3.9 is the lowest version that will support NGX but I'm not familiar with VSX so I'm not sure what version of IPSO will support that.

Other item of interest... The support from Nokia is excellent, they will support the hardware, the OS as well as the Check Point software. No chance of them pointing fingers at the other companies.

[kva.kva]

VSX NGX works only on SPLAT. It's a separate distributive based on SPLAT.

[sebastan_bach]

thanks a lot to all of u people for this discussion.

sebastan

[Sergej]

Nokia is a style :) In some countries (Nordic) the best firewall vendor is Nokia (buyers do not warns what is inside). Nokia makes strong positions in USA also.

SPLAT gets more and more Nokia IPSO functions. But according to Checkpoint engineers Nokia and SPLAT not a competitors and targeting different customers and markets.

[sebastan_bach]

hi sergej but u can see that eventia reporter is not supported for nokia. if i want to learn checkpoint over nokia i mean say all the modules and features of it. which nokia box will i have to buy, pls guide me if possible. waiting for ur reply.
thank u once again .

sebastan

[Lackie]

Eventia Reporter can be used with the Nokia appliances but it has to be in a distributed setup and only the add-on is installed on the Nokia.

As for just testing all of the Check Point functionalities on a Nokia appliance, everything can be tested on almost any appliance. Apart from VSX which I don't know enough about other than it's 'supported' on the IP710 and IP1260. It may still be able to be installed and work on smaller appliances. If you were just testing then you probably don't need an IP710 as these can average about $20,000. Pretty expensive testing platform if you ask me unless you pick one up on e-bay.

If you are just needing an appliance to test on, It will depend on how much testing and traffic you are wanting to put through it. You can do alot of NGX testing on an IP130 but from my experiance you may get frustrated pushing a policy to it as it can be a little slow. The IP260 has been pretty reliable but would shy away from the IP265 as it's diskless and currently have been having some problems when upgrading and installing hotfixes and won't support much of the additional Check Point packages.

For a mid-sized box, you can't go wrong with an IP350 or IP380. Again, shy away from the IP355 and IP385 if you are wanting to test additional Check Point packages as these are diskless as well.

[sebastan_bach]

hi lackie thanks for the detailed explination once again. i just read the datasheets of ip 380 and ip385 both are supporting vpn-1pro,vpn express cli and vsx also.could u just a give me a rough idea how much would a nokia ip 380 or 385 would cost for.so lackie what do u do. i have done my ccsp i have worked on cisco pix,routers,vpn concentrators and their ips boxes. new to checkpoint currently working on netscreen. what abt u . thank u once again.bye

sebastan

[ScottRD]

Sebasatan, just to clarify your needs, are you looking to use a Nokia simply for your own education or is it that you want to test a Nokia platform to potentially incorporate it into a corporate environment? The reason I ask is that the devices are quite expensive to simply be used as a training tool. The price is in the tens of thousands of dollars. Don't get me wrong, the product is wirth every penny, it's just that this would be one of the most expensive options for practicing for CCSA/CCSE, if that's what you are after. Since SPLAT is software only it would be the least expensive option.

[sebastan_bach]

hi scott for my training of ccsa and ccse i am sure i will work on secure platform only. i also teach ccsp . i want to start training people on checkpoint like cisco. but ofcourse after i get certified in it. is there a huge difference in working on nokia and on the secure platform. cause before joining the actual industry i would surely like to get my hands on nokia also. could u give a rough price of nokia 380 and nokia 385 just curious.and any other model u would suggest which is not expensive and can be used for training also. thank u scott.

sebastan

[Lackie]

http://www.checkpoint.com/products/c...s_product.html

This should give you a rough estimate. I think this is somewhat old and not sure if the prices have been updated. Best to talk to a Nokia SE or Sales to get a price quote. As best I know, the prices in the above link do NOT include Support or the CP license.

[ScottRD]

Lackie is correct. This price (US $) is close enough for an estimate and does not include a support contract, nor does it include a license for the Check Point software. There is a newer lower priced model also, which should fit your needs. See:

http://www.checkpoint.com/products/c...okiaip26x.html

The very best thing you could do would be to contact Nokia Sales as also
suggested by Lackie.

[sebastan_bach]

hi scott and lackie what would be the ideal nokia box for less which can support running vpn 1 pro NGX. pls guide through thank u .

sebastan