Netscreens can handle a large number of connections (relative to other
firewalls) but they must be built up slowly. This is not the case with
http. A single browser may open up several short-lived connections.
Your best bet is probably a Check Point firewall. The Alton series can
handle around 600k connections. You could probably get 100k off a good
x86 box or Sun box. Don't bother with Nokia. You can get the
reliability you need by using checkpoint's HA options.
~Paul
**** This is my personal option and I hold no responsibility for it.
:-p Its not my fault if you do something stupid with any info that I
give out. I also make no guarantees that what I say is even slightly
accurate. ****
On 4/18/05, Mark Owen <mr.markowen@gmail.com> wrote:
I highly recommend the Netscreen 5XP. It supports tear-drop attack
protection, SYN flood protection, Ping-of-Death protection, Land
attacks, and more. We recently outgrew it but it was a great
firewall.
http://www.juniper.net/customers/support/products/netscreen5xp.jsp
On 4/16/05, Andrew Rogers <andrew.rogers@optusnet.com.au> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello All,
Situation: One webserver - Estimated hits p/w 100k+ HDSL connection to
the outside.
The question is. What is the best Firewall to use? Can a firewall be
stuck _on_ the server? what are your suggestions?
The most important thing is the ability to remotely manage (ie. From
another country)
Please help - More info can be provided if required.
- -andrew
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCYNiKHrvPMNIBbzMRAgKmAKCXQoQBHOwSCQ4m/DCGLHc+6BKLOQCfYzOj
aYwxBzvIKW345UfLCEwd4KY=
=aTFs
-----END PGP SIGNATURE-----
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
--
Mark Owen
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
