topic Re: CheckPoint Firewall1 in Operating System - HP-UX

CheckPoint Firewall1

Miguel A. Aliaga — Fri, 20 Apr 2001 08:03:51 GMT

I am going to mount CheckPoint Firewall1 but I don`t know if will do it in HP-UX 11 or in NT/2000.
Any problem about HP-UX ???
Any recomendation/suggestion ???

Thanks.

Re: CheckPoint Firewall1

Steven Sim Kok Leong — Fri, 20 Apr 2001 09:59:36 GMT

Hi,

I do not recall Checkpoint FW-1 having a release that runs on top of HP-UX. I do know that HP-UX runs the Raptor firewall. I read that HP-UX 11i comes built-in with host-based IDS (Intrusion Detection System).

I hope I understand your question correctly. In my opinion, forget NT/2000. Checkpoint FW-1 runs best on Solaris.

Comparing the number of alerts from SANS Security Alert Consensus, I would not run a firewall on the weaker OS when it comes to security vulnerabilities.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

Re: CheckPoint Firewall1

Miguel A. Aliaga — Fri, 20 Apr 2001 10:23:38 GMT

Hi Steven,

Checkpoint FW1 runs on HPUX 11.x

I know that Solaris is the best choice for this case ( FW1 ), but my only option is to install it on HPUX or NT/2000. I think HPUX it most secure than NT/2000 but I would like to hear about experiences in both cases.

Thanks.

Re: CheckPoint Firewall1

Marc Dijkstra — Fri, 20 Apr 2001 10:37:35 GMT

I have a checkpoint Firewall-1 running on HP-UX 11.x in front of a VVOS. I trust the system as far as I can, would certainly not try a Windoooze system to do the job, just too many holes in that lovely OS for comfort.

As stated earlier, there is a Raptor, which I personally prefer being a Proxy based FW whereas a FW-1 is a stateful inspection packet filter.. HP WERE using Raptor as the e-firewall in the Praesidium suite, not sure what they are using now, I do know it is Proxy based however, check out www.hp.com/go/security

MND

Re: CheckPoint Firewall1

Trent Cameron — Fri, 20 Apr 2001 10:46:05 GMT

Hi,

One of the main things to look out for when installing HPUX is to make sure your using a 32-BIT version of the OS. I tried 11i (64-Bit) and Firewall-1 would not work.

Hopefully this can save you some of the trouble I ran into.

Re: CheckPoint Firewall1

A. Clay Stephenson — Fri, 20 Apr 2001 12:55:38 GMT

We originally had FW1 running on an NT server and it crashed with great regularity; since moving to HP-UX we had had no problems whatsoever. The only downside is that if you need a content vectoring server, it can't be on HP-UX (Checkpoint had not ported the toolkit the last time I checked). The CVP server can be on another box and invoked from FW1 running HP-UX.