Checkpoint ports Firewall-1 and VPN-1 to Linux

Navigation

User login

GWT in Practice at Manning
GWT in Practice at Amazon
GWT Resources

Unlocking Android at Manning
Unlocking Android at Amazon
Android Resources

Quote

John F. Kennedy

There is no strife, no prejudice, no national conflict in outer space as yet. Its hazards are hostile to us all. Its conquest deserves the best of all mankind, and its opportunity for peaceful cooperation may never come again. But why, some say, the moon? Why choose this as our goal? And they may well ask why climb the highest mountain. Why, 35 years ago, fly the Atlantic? Why does Rice play Texas?

We choose to go to the moon. We choose to go to the moon in this decade and do the other things, not because they are easy, but because they are hard, because that goal will serve to organize and measure the best of our energies and skills, because that challenge is one that we are willing to accept, one we are unwilling to postpone, and one which we intend to win, and the others, too.

Checkpoint ports Firewall-1 and VPN-1 to Linux

Wed, 12/31/1997 - 20:05 — charlie.collins

It makes logical sense, a leading vendor of Wintel, Solaris and AIX security software, Checkpoint, ports to Linux. The popular Firewall-1 and VPN-1 products will be available on Linux first quarter next year. Not free and open source, but great news just the same.The firewall part is a no brainer, Linux makes a great a totally configurable firewall without additional software, but it can be difficult to configure. A commercial enterprise class firewall with GUI on Linux will sell. The VPN is also a good idea, and logical in combination with a firewall. Linux also has many VPN products (including the open source flavor in FreeSWAN.) But the advantage again is the commercial flavor that should be much easier to configure and will have software for a varierty of clients (rather than just firewall to firewall WAN type VPN tunnel.)I think this type of commerical exposure, although undoubtedly expensive, and therefore against my philosophy, will ultimately be good for Linux in the mean time. The "mean time" means that one day a free and Open Source product will be complete and will compete with the commercial guys in every arena (there are current Firewall and VPN GUIs for Linux, but none are complete or very robust and therefore normally do not get used in production environments.) Competition is great, it will make all software better and cheaper (if not ultimately free.) And people will buy it. The Wintel shops that I have worked in and the Wintel Firewall-VPN solutions I have used and implemented have been, lets be polite and say, less than ideal. If your firewall is constantly at the "blue screen of death" well, technically that is pretty secure, but so is unplugging the damn thing. Both have the same effect, useless. As for VPNs based on Wintel, without encryption accelerators, can you say "waiting is the hardest part" (and keep the Petty drawl, it helps drag it out.) An Intel-Linux Firewall-VPN will offer a much better solution, Linux is far better suited to security than other Intel platform OSs.Check the link for details.Checkpoint Firewall-VPN on Linux