Hi,
I am working on a security proposal for an SMB size company (about 200 nodes with a remote data center). I am trying to cover the following areas:
Perimeter firewalling, VPN, IPS/IDS, Anti Virus at Gateway level, Web Content Filtering (including URL Filtering) and finally Wireless security.
From my previous expeiences, a combination of PIX and a security appliance (such as Symantec Gateway Security Appliance) can cover all of the above, however, I have been asked to consider a Nokia/Checkpoint solution as well because it can also cover all the above requirements in one appliance.
I know PIX but have no experience with Nokia and have not been able to find any comparison or evaluation for both PIX and Nokia. My questions:
1. Can someone who has worked with both PIX and Nokia solutions let me know the pros and cons for each (I myslef obviously prefer PIX but need a technical rational behind my proposal).
2. Am I right that PIX cannot support all the above features? I know that with WebSense I can almost get the Web Content Filtering portion from PIX but what about Gateway AntiVirus? Also PIX IDS capabilities is very limited. Is there any other Add-On feature set or third party software available for PIX for these features?
3. What is the major highlight feature/capability of PIX that can be used to beat other solutions in the market? As far as I know, ASIC level OS and speed/performance ... Any thing else !? (this cannot be a winner feature for a SMB site with limited size and budget)
Any input is highly appreciated.
Regards,
Ali