2nd Firewall

[Piloria]

I am a checkpont person so i thourght i would ask here
we are looking at a 2nd firewall layer (not a huge company so up to now 1 has been enough)
we are running CP on the perimiter so are looking at a different vendor for the internal network.
what recomendations would you make to give an idea of size i have been looking at Cisco Pix 525 UNR and Netscreen 208 but would welcome any other comments or recomendations

 

[wirelesspeap]

I would do the following:

1) run pix or netscreen at your perimeter. Pix has much better throughput than CP,

2) run cp for your internal network. checkpoint logging is 2nd to none, much better than pix for sure.

wireless