+ Reply to Thread
Page 1 of 3
1 2 3 LastLast
Results 1 to 15 of 34

Thread: Firewalls

  1. #1
    Certified VIP Host
    I have made 1609 posts
    292 posts within 6 months
    Contact Me, Company profile
    goscombtech is on a distinguished road

    Firewalls

    As everyone know... I love everything Juniper. To that tune, we are looking for a set of new firewalls and are thinking of these in routed mode (OSPF stub, iBGP defaults) as A/A pairs:

    http://www.juniper.net/products_and_...ies/index.html

    Anyone have any previous experience with them? I am hoping to get one on eval for a play.
    Goscomb Technologies Limited - www.goscomb.net / AS39326

    E: sales@goscomb.net P: +44 (0) 203 129 4400 F: +44 (0) 203 129 4410

    Free IPv4/IPv6 Dialup! p: 08456043047 u: dial@goscomb.net.uk p: dial
    IP Transit :: Colocation :: Dedicated Servers :: Leased Lines :: DSL
    Registered in England and Wales No. 05672987 - VAT Registration No. 853 7954 80

  2. #2
    Certified VIP Host
    I have made 7042 posts
    303 posts within 6 months
    Contact Me, Company profile
    Karl is on a distinguished road
    I've not heard fantastic things about Netscreen for some time now, we were looking at them + the Juniper IPS product for a customer, in the end we went with TopLayer.
    Karl Austin :: Owner :: KDA Web Services Ltd. :: UK Web Hosting and Servers
    0800 542 9764 :: Company: 04114724 :: VAT: GB 842 9597 81
    "Individual Solutions for Individual Customers" - Call us today for free

    Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. - Einstein

  3. #3
    Certified Standard Host
    I have made 67 posts
    12 posts within 6 months
    Contact Me, Company profile
    DF-Duncan is on a distinguished road
    We have used many Juniper products, and we personally prefer the TopLayer applications, as these are proving much more effective.
    Duncan Knapper
    Director
    Dataflame Internet Services Ltd
    e: sales@dataflame.co.uk | w: http://www.dataflame.co.uk | t: +44(0)20 3137 3636

  4. #4
    Certified VIP Host
    I have made 3937 posts
    313 posts within 6 months
    Contact Me, Company profile
    markcastle is on a distinguished road
    Have a look at this thread
    ••• Mark Castle ••• Secura Hosting Ltd •••
    ••• Managed Hosting •••
    ••• AS29452UK Company Reg No: 04330657VAT Number: 789 2703 81Sales: 0845 123 2632 •••
    My views are my own and not those of my company.

  5. #5
    Certified VIP Host
    I have made 3680 posts
    204 posts within 6 months
    Contact Me, Company profile
    Ricky-Serverstream is on a distinguished road
    THIS USER HAS BEEN GAGGED BY THE FORUM HOSTS FOR SPAM OR BREAKING THE RULES...
    User will be ungaged in around 65 hours from this post.

    Ricky
    Business Development Manager - Serverstream Ltd
    Managed Services | Dedicated Servers | Network Security
    T: +44 (0)20 7517 0609 E: ricky@serverstream.net

    Note: All of the views above are my own and not in any way representative of my company.

  6. #6
    Certified VIP Host
    I have made 1609 posts
    292 posts within 6 months
    Contact Me, Company profile
    goscombtech is on a distinguished road
    PIX doesn't do all we need

    Karl: this is the SSG i'm looking at, not netscreen. same screenos yes, but iirc the boxes are a lot more powerful, no?

    Does anyone have any toplayer pricing info and a spec sheet?
    Goscomb Technologies Limited - www.goscomb.net / AS39326

    E: sales@goscomb.net P: +44 (0) 203 129 4400 F: +44 (0) 203 129 4410

    Free IPv4/IPv6 Dialup! p: 08456043047 u: dial@goscomb.net.uk p: dial
    IP Transit :: Colocation :: Dedicated Servers :: Leased Lines :: DSL
    Registered in England and Wales No. 05672987 - VAT Registration No. 853 7954 80

  7. #7
    Certified VIP Host
    I have made 7042 posts
    303 posts within 6 months
    Contact Me, Company profile
    Karl is on a distinguished road
    At the end of the day, the SSG is a Celeron or a P4 running stuff in software - It's the same as the J-Series routers

    Pricing for TopLayer - from £10k from memory.
    Karl Austin :: Owner :: KDA Web Services Ltd. :: UK Web Hosting and Servers
    0800 542 9764 :: Company: 04114724 :: VAT: GB 842 9597 81
    "Individual Solutions for Individual Customers" - Call us today for free

    Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. - Einstein

  8. #8
    Certified VIP Host
    I have made 5164 posts
    251 posts within 6 months
    Contact Me, Company profile
    JamieBeeston is on a distinguished road
    Cisco ASA for the Lower budget clients, Checkpoint for the higher bidget clients.

    Sorted.
    Register1.net
    .eu £7.95
    .com .net .org .uk £5.48
    Premium UK Virtual Hosting from £16 a year
    Quad Core 2.83Ghz 1GB 2TB 250GB Xeon Servers from £49
    Company reg: 04186664 VAT reg: GB 815 5899 88
    [Any views expressed on this forum are my own, and may not represent the views of any organisation that I own or am connected with.]

  9. #9
    Goscomb - Interested to hear what the PIX's or ASA's dont do that you need? Always good to keep abreast of customer firewall/solution demands.
    Matthew Parks

    [Any views expressed on this forum are my own, and do not represent the views of any companies I may be associated with]

  10. #10
    Certified VIP Host
    I have made 1609 posts
    292 posts within 6 months
    Contact Me, Company profile
    goscombtech is on a distinguished road
    Quote Originally Posted by MattParks View Post
    Goscomb - Interested to hear what the PIX's or ASA's dont do that you need? Always good to keep abreast of customer firewall/solution demands.
    Unless they do routed mode these days and support OSPF + BGP and IPv6 ? They didn't used to the last time i looked...
    Goscomb Technologies Limited - www.goscomb.net / AS39326

    E: sales@goscomb.net P: +44 (0) 203 129 4400 F: +44 (0) 203 129 4410

    Free IPv4/IPv6 Dialup! p: 08456043047 u: dial@goscomb.net.uk p: dial
    IP Transit :: Colocation :: Dedicated Servers :: Leased Lines :: DSL
    Registered in England and Wales No. 05672987 - VAT Registration No. 853 7954 80

  11. #11
    Mooharr
    no reviews yet. Post Review
    Certified VIP Host
    I have made 2376 posts
    277 posts within 6 months
    Contact Me, Company profile
    JamesSykes is on a distinguished road
    I went for the Cisco's because they seem to be pretty much standard in my price range and I've rarely heard a bad word said about them. (except from nokia checkpoint nerds)

    I was put off by the Netscreens by a couple of members on here and also a friend who almost broke into a sweat during a 15 minute rant damning them to hell!

    They will do routed mode and OSPF and IPV6 but I'm not sure about BGP.
    Mooharr
    E-Mail Hosting Services

    These are not my views and i cannot be held accountable for anything he says.

  12. #12
    C.C.S. Leeds Ltd
    no reviews yet. Post Review
    Certified VIP Host
    I have made 2935 posts
    748 posts within 6 months
    Contact Me, Company profile
    Pete-CCS is on a distinguished road
    Quote Originally Posted by goscombtech View Post
    Unless they do routed mode these days and support OSPF + BGP and IPv6 ? They didn't used to the last time i looked...
    They do (and as far as I recall always have) supported routing, both Pix's and ASAs.

    They certainly do OSPF and BGP, not sure about ipv6 tho tbh. Got two ASAs to install tomorrow, so will take a look, but other than that ticks the boxes, and ASAs (so long as you don't want Anti V/Spam, Phishing etc etc) stuff on them are comparatively cheap as chips. £1300 ish for a 350mb/s firewall only unit, 6k connections per sec, 130k tops connections. Ok, that is the baby of the rack mounts (5510 in the Plus version - more max connections and vlans) but still V sensibly priced IMO if you want some gig ports and gig plus capability.

    Quick compares > http://www.cisco.com/en/US/products/...omparison.html

  13. #13
    Certified VIP Host
    I have made 7042 posts
    303 posts within 6 months
    Contact Me, Company profile
    Karl is on a distinguished road
    From memory, a recent NANOG thread said that whilst they do support IPv6, it's a very limited feature set compared to the IPv4 support.
    Karl Austin :: Owner :: KDA Web Services Ltd. :: UK Web Hosting and Servers
    0800 542 9764 :: Company: 04114724 :: VAT: GB 842 9597 81
    "Individual Solutions for Individual Customers" - Call us today for free

    Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. - Einstein

  14. #14
    Coreix Limited
    no reviews yet. Post Review
    Certified Standard Host
    I have made 544 posts
    31 posts within 6 months
    Contact Me, Company profile
    imran is on a distinguished road
    We have about 70 Juniper Netscreen/SSG firewalls in operation ranging from the 5GT to SSG520. We did have issues with the 5GT however Juniper support were quick to resolve this and all seems to be humming along fine.

    Some units are almost 4 years old but still work perfectly.
    Speak to the guys at http://www.1stsecuritywarehouse.com

  15. #15
    Certified VIP Host
    I have made 3349 posts
    1248 posts within 6 months
    Contact Me, Company profile
    Ed-Freethought is on a distinguished road
    Not used any Juniper kit, but I swear by Fortinet's FortiGates. Hardware accelerated with AntiVirus and IPS/IDS. You can pick up a FortiGate 400A for about £4500 which will do 450Mbps across a pair of gigabit and four 10/100 ports if memory serves me correctly. Awesome performance and no bloody host count licensing (I'm looking at you Check Point). They do OSPF and BGP as well.
    I think Check Point still wins out with management and logging tools though, they just have a much more mature tool set.
    Not had the joy of playing with Crossbeams or anything like that, but I've worked with a lot of Nokias running everything from 4.1 to NG R55 and they are all right, not fantastic, but all right. They don't seem to work well with more than 50-60 VLANs and getting them to crash and reboot isn't too hard if you know what you are doing but if you just leave them alone then they are fine. Have worked with some in a data centre environment that have been up for years, running hundreds of VPNs and the only problems are when the hardware eventually dies.
    Nokias do OSPF and BGP, as do other Check Point appliances like the Corssbeams but with Check Point it is up to the appliance/OS to provide routing protocol support, something that dedicated, integrated systems don't suffer from.
    Last edited by Ed-Freethought; 22nd January 2008 at 01:39 AM.

+ Reply to Thread
Page 1 of 3
1 2 3 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Similar Threads

  1. Software Firewalls
    By richard in forum General Chit Chat & Discussion
    Replies: 11
    Last Post: 22nd July 2002, 02:17 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Content Relevant URLs by vBSEO 3.5.0 RC2