Difference between PIX and Checkpoint Firewall

[vkartik]

Can somebody please tell the difference between the

PIX Firewall and CheckPoint Firewall?

Thank you.

Kartik

[edmonds_robert]

Kartik,

Let me give you a textbook answer. For reference, this info comes directly from the book "Firewalls 24seven" by Sybex press.

Checkpoint Firewall-1 Major Feature set:

1. Stateful packet filter

2. Protocol specific content filters (HTTP, SMTP)

3. NAT

4. VPN firewall-to-firewall and firewall-to-remote client

5. User authentication handled transparently throught the various protocol content filters

Some of the minor features:

1. Policy-based configuration and management

2. Content vectoring protocol (Lets you strip e-mail attachments, block URL's, etc.)

PIX Major Feature Set:

1. Stateful inspection filter

2. NAT

3. Authentication

4. VPN

5. Probably the fastest firewall on the market

6. Support for external security proxies and content filters

PIX Minor features

1. High availability

2. Support for four security zones

3. Java filter.

Just to add one thing -- I have used both software firewalls and now have a PIX. I will never go back to the software firewall. The PIX is quite a bit harder to configure (lack of GUI, you know), but I like it a lot better (SPEEEEEEED).

Hope I have helped a little.

[leo.vaughn]

What about CheckPoint running on Nokia IP xxx (not sure about the number)? What is your opinion on that? Does it work better than Cisco VPN Concetrator?

[murriware]

Well,

VPN concentrator is not a firewall and so it's not comparable.

I installed PIX and VPN concentrator in parallel inn order to get one secure access point to Internet (PIX) and two secure VPN access points from Internet (PIX and VPN c'r).

Furthermore, an operation of two such different companies (Nokia and Checkpoint) does not convince me.

Regards.

Maurizio

[mmensik]

Hi Robert ,

I would like ask you about some information/experience with PIX workinf with a AntiVirus throw Content Vectoring Protocol.

Thank you advance, Tomas [kudtom@hotmail.com]

[vkartik]

Thank you, it helped me alot