[nsp] Managing the Pix

From: Stephen R. Gill (gillsr99@yahoo.com)
Date: Mon Nov 13 2000 - 19:52:19 EST


I would greatly appreciate any information that can provided on the
following:

1. The usefulness of CSPM program in managing PIX Firewalls. I'm
particularly interested in
  a. How well it can manage a large network and ruleset.
  b. Will it support adding multiple Firewalls that route for the same
networks. IE. Firewall Load Balancing (don't ask).
  c. Any personal experiences with the CS Policy Manager good or bad. To me
it seems rather convoluted.
2. Reliable 3rd party products that will mange a PIX ruleset.
3. Things to watch out for that may cause large performance hits: ie. NAT,
RPF, too many rules, tcp-intercept, etc...

I'd much rather configure it at the command line but require the ability to
insert rules ad hoc, and allow more novice users to create rules.

Thanks!!
-- steve

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:20 EDT