Re: [Full-Disclosure] PIX vs CheckPoint

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yo Eric!

On Tue, 29 Jun 2004, Eric Paynter wrote:

> Once the
> administrators had finished their Cisco training, they said they would
> never go back to FW-1 because the PIX interface was so much easier to use.

I agree, except for one small problem.  Don't you still have to delete
ALL the filter rules, and reenter them ALL to change the order of the
rules? last I checked there was no "insert before", "insert at top" sort
of options.  Just "insert at end".  This and other features can really
slow down the otherwise decent CLI.

Another bad thing about the PIX CLI is that is looks a lot like the IOS CLI,
but has lots of subtle differences that will byte you when you least expect
it.

RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
        gem@rellim.com  Tel:+1(541)382-8588 Fax: +1(541)382-8676

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFA4gH58KZibdeR3qURAnCfAKDL9VzGNLI2M0qLk9prZDRkZkTBDwCdEPf5
1Qj455VjC16sl2btWtZlEks=
=6Mdj
-----END PGP SIGNATURE-----