PIX firewall and CheckPoint

I am new to firewall concept.Can anyone explain me how does the Administration of a PIX Firewall differ from a Checkpoint firewall?
anumitAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dluetkeCommented:
Hi,
there are many differences between these two firewalls, but I will try... leftside is Checkpoint, rightside PIX

Rules are configured by GUI <-> Command line, TXT configuration of rules
"Just configure a rule" <-> Find the correct inbound interface for a rule and configure the rule to that interface
FW Log searchable with GUI <-> FW Logs are send to SYSLOG, search by "grep", etc.
Runs under different OSes (Linux, Windows) <-> Runs under Cisco's PIX OS
Seperate management system with rulesbases and logs, etc. <-> Every thing is contained on the PIX.

.... and there are many other things!

Let me tell you my experience (responsible for 10 PIX devices and 20 Checkpoint FWs on Provider-1)

If you expect to have a somewhat small firewall infrastructure, e.g. 1-2 Firewalls with each of 2-4 Interface and say up to 30  firewall rules, which where - in addition - mostly implemented in a static way (so that they don't change often), then I would say, the PIX is your friend!

If you have more firewalls with more interfaces, then on the PIX firewall the number of rules can - and often will - rise to a level, where an easy and simple manageability of the rulebase is not give anymore. If there are also often changes to the firewall rules, go on and take Checkpoint on Secureplattform. In this case you will save much time.

Just me 2c ...

Cheers, Dirk



Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dbardbarCommented:
dluetke -

I've had some experience with Cisco routers and switchs, but no experience at all with PIX. I do not intend to open a flame war (FiReWaLL-1 RuLeZ!!!111), but I'm very intersted in hearing your opinion, as a guy who has experience with both systems, in what areas PIX is superiour to FW-1.

Price? Reliability? Performance? Security? Ease of use?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.