Are you sure your not using 'fwui' on Solaris (and Xforwarding to Linux)? If your not, enlighten us!:) I would *LOVE* to access the newest GUI in Linux.
Keep in mind that the Solaris Motif GUI costs 1000$ per firewall, and is licensed on the firewall. (not the client itself) Which means that in a reseller scenario, I would have to sell every one of my customers that 1000$ Motif GUI license:(
The IP650 contains an Intel motherboard (i believe), and the hard drive is your standard 2.5inch notebook drive. Keep in mind all of the slots in a IP650 are C-PCI.
I would recommend unscrewing the hard drive from the C-PCI adapter board, and using an IDE adapter to plug it into a standard PC. As long as the drive is active, it *should* work when put into the 650. The problem with that machine is that the VGA connector is impossible to get to when the case is assembled. (and it needs to be assembled in order to get power to the NLX motherboard.
So if you really want to put Linux or openbsd on that thing, make sure you configure the OS to dump the root console to the serial port...
Ive installed probably over a hundred of Nokias in the field, so ive seen a lot with these machines...
In terms of support, everyone here is right - stick with IPSO so you dont void your warranty! Nokia IPSO is a great os for Check Point, and supports all the features Check Point supports (except the Reporting Module server - its Wind0ze only - well until NG FP4...;)
I have a few customers that have installed Secure Platform (customized, hardended RedHat 7.2 with a shell to ease administration - in NG FP4 contains a web gui similar to their SOHO Home products) All of these customers have expired hardware contracts so its no big deal to them. The IP330 and IP440 are quite out-dated now... Netfilter does not need much power though:)
I agree CheckPoint is a little pricy, but they have a feature set that nothing else touches.. yet... Cool stuff, like single-sign on transparent authentication with user logging, and centralized logging with a decent gui with reporting features. (all for a price...)
My only beef with the product is NO LINUX GUI! aarrgg... At least i can run Windows in a VM on Linux and OSX... (well, i also dont like the fact that it is closed source, but i cant do much about that...)
As for the Boot Manager, you can safely wipe that out on the IP330 if your going to Linux... Its similar to the/boot patition on a Linux box - its does not contain BIOS stuff...
Wouldnt it be nice if there was a decent, cross-platform gui for distributing Netfilter rulebases to multiple Linux firewalls with a centralized logging database and a nice PHP/MySQL frontend for reporting...
She saw me reading the Radio Shack 'Getting Started In Electronic's book over and over again and (in between studies for various certifications) and decided to get me a kit.
in case your curious, this works on access points using the Eumitcom WL11000SA-N boards...
( ref: http://opensource.instant802.com/hardware.php )
Tested: US Robotics 2450, SMC EZconnect 2652W
the biggest problem i have with the browser, is the speed of the drop downs, and overall UI...
its very slow compared to every other app on my system (gnome or kde)... i realize the UI rendering system is nice and scriptable and all... BUT... at least Galeon makes it quite usable...
tunneling over port 80 breaks all kinds of standards... what we need to do is standardize the way hide NAT handles incoming traffic.
right now, the firewall keeps track of the state connection (usually via a high source port #) and lets the returning packet go to the correct internal host.
what needs to happen, is to create some type of standardized way of accepting incoming connections to a firewall, to route them to the correct interal host... unfortunatly, no matter what, this will be a security risk.
the quick fix, which seems to be the only way using current standards, when 2 hosts are firewalled, is to use a server of some type... no way around it, but bringing port 80 tunneling mainstream, will cause security headaches globally
Most at 192k... Remember, its not the *AMOUNT* of music that is important... (well it is for bragging rights, but thats about it) , its the *CHOICE* of what is available to listen to!:)
Its would be quice nice for me to have several thousand CDs worth of mp3s in my car! and the pricing is reasonable... (300$ mp3 player + 300$ 80 gig maxtor... drool)
i guess im lucky to have friends at used cd stores...;)
the other day i went to install WindowsME in VMWare on my Linux machine at work, so i can run the Checkpoint Firewall GUI on my workstation (Win32 only app:( and WinMEssy gives me an error message at the beginning of the install: 'Processesor under 150 Mhz, 150 Mhz processor or higher required for install to continue. Press OK to reboot.' (thats not exact, but almost)
complete bull$#@% - checkpoint better get a clue and release a GNOME GUI soon
the XBox is not open sourced. microsoft is letting developers write software using their API (running on a closed-source kernel) (with closed-source development tools) all running on a closed source MS-XBox OS...
im looking forward to the Indrema system, they look like they are doing it right... i hope they have funding:)
Slashdot Mirror
Are you sure your not using 'fwui' on Solaris (and Xforwarding to Linux)? If your not, enlighten us! :) I would *LOVE* to access the newest GUI in Linux.
:(
Keep in mind that the Solaris Motif GUI costs 1000$ per firewall, and is licensed on the firewall. (not the client itself) Which means that in a reseller scenario, I would have to sell every one of my customers that 1000$ Motif GUI license
actually, i think the modem might work in Linux.... on the Nokia i think its serial
The IP650 contains an Intel motherboard (i believe), and the hard drive is your standard 2.5inch notebook drive. Keep in mind all of the slots in a IP650 are C-PCI.
I would recommend unscrewing the hard drive from the C-PCI adapter board, and using an IDE adapter to plug it into a standard PC. As long as the drive is active, it *should* work when put into the 650. The problem with that machine is that the VGA connector is impossible to get to when the case is assembled. (and it needs to be assembled in order to get power to the NLX motherboard.
So if you really want to put Linux or openbsd on that thing, make sure you configure the OS to dump the root console to the serial port...
Ive installed probably over a hundred of Nokias in the field, so ive seen a lot with these machines...
;)
:)
/boot patition on a Linux box - its does not contain BIOS stuff...
In terms of support, everyone here is right - stick with IPSO so you dont void your warranty! Nokia IPSO is a great os for Check Point, and supports all the features Check Point supports (except the Reporting Module server - its Wind0ze only - well until NG FP4...
I have a few customers that have installed Secure Platform (customized, hardended RedHat 7.2 with a shell to ease administration - in NG FP4 contains a web gui similar to their SOHO Home products) All of these customers have expired hardware contracts so its no big deal to them. The IP330 and IP440 are quite out-dated now... Netfilter does not need much power though
I agree CheckPoint is a little pricy, but they have a feature set that nothing else touches.. yet... Cool stuff, like single-sign on transparent authentication with user logging, and centralized logging with a decent gui with reporting features. (all for a price...)
My only beef with the product is NO LINUX GUI! aarrgg... At least i can run Windows in a VM on Linux and OSX... (well, i also dont like the fact that it is closed source, but i cant do much about that...)
As for the Boot Manager, you can safely wipe that out on the IP330 if your going to Linux... Its similar to the
Wouldnt it be nice if there was a decent, cross-platform gui for distributing Netfilter rulebases to multiple Linux firewalls with a centralized logging database and a nice PHP/MySQL frontend for reporting...
Ralph Bonnell - CISSP, LPIC-2, CCSI, CCSE+, CCNA, RSA/CSE, CSFE, MCSE 2000
She saw me reading the Radio Shack 'Getting Started In Electronic's book over and over again and (in between studies for various certifications) and decided to get me a kit.
:)
She gave me bookmarks after chrismas...
Good list of kits: http://www.hobbytron.net/electronickits.html
I have the 300-on-1 which is $70 and is solderless.
Also check out http://www.kitguy.com/ - seems to be a definitive resource...
actually it has KMines... who needs minesweeper? :)
Wanted to mention Opie, which is an open environment for handhelds (notably the Zaurus and the iPAQ)
:)
Check out the screenshots of opie in action... I was hooked at first sight
Mirror: http://ralph.cx/tcpseq/
Im missing 3 images... for now...
umm.. heh, thanks :)
heh, we got married in vegas! all weddings should have an option for elvis... :)
Go here... Ill get as many as i can, these are sweet :)
i may want go to this... :)
:)
i work in Fort Lauderdale, a few miles away from the library
Anything i should listen out for?
I dont know about what you all want, all i want is a cell phone the size of a Jabra ear piece :)
in case your curious, this works on access points using the Eumitcom WL11000SA-N boards...
:)
( ref: http://opensource.instant802.com/hardware.php )
Tested: US Robotics 2450, SMC EZconnect 2652W
Time to buy an SMC for me
Heh, just in case anyone wants to experience the nostalgia.../
ftp://ftp.ncsa.uiuc.edu/Mosaic/Unix/binaries/2.7b
the biggest problem i have with the browser, is the speed of the drop downs, and overall UI...
its very slow compared to every other app on my system (gnome or kde)... i realize the UI rendering system is nice and scriptable and all... BUT... at least Galeon makes it quite usable...
Fewer than 300 is not that big of a deal, IMHO...
i hope this problem is not in the sony notebooks....
tunneling over port 80 breaks all kinds of standards... what we need to do is standardize the way hide NAT handles incoming traffic.
right now, the firewall keeps track of the state connection (usually via a high source port #) and lets the returning packet go to the correct internal host.
what needs to happen, is to create some type of standardized way of accepting incoming connections to a firewall, to route them to the correct interal host... unfortunatly, no matter what, this will be a security risk.
the quick fix, which seems to be the only way using current standards, when 2 hosts are firewalled, is to use a server of some type... no way around it, but bringing port 80 tunneling mainstream, will cause security headaches globally
does anyone know? :)
Most at 192k... Remember, its not the *AMOUNT* of music that is important... (well it is for bragging rights, but thats about it) , its the *CHOICE* of what is available to listen to! :)
;)
Its would be quice nice for me to have several thousand CDs worth of mp3s in my car! and the pricing is reasonable... (300$ mp3 player + 300$ 80 gig maxtor... drool)
i guess im lucky to have friends at used cd stores...
i did not expect this thing to be so close...
according to your opinion then, i am doing a criminal act for doing zone transfers to random domain servers?
:) , try and stop me
i can do a zone transfer to anywhere i want to
hey, if the dns server allows me to do a zone transfer, great! it shouldnt have let me to do that if they wanted the dns zone to be a secret.
hmm, that might cause a riot! oh, and there is always the chance that one of them has automatic weapons!
;)
some people take video games pretty seriously
wouldnt suprise me *grin*
:( and WinMEssy gives me an error message at the beginning of the install: 'Processesor under 150 Mhz, 150 Mhz processor or higher required for install to continue. Press OK to reboot.' (thats not exact, but almost)
the other day i went to install WindowsME in VMWare on my Linux machine at work, so i can run the Checkpoint Firewall GUI on my workstation (Win32 only app
complete bull$#@% - checkpoint better get a clue and release a GNOME GUI soon
i DID read the article :P
:)
the XBox is not open sourced. microsoft is letting developers write software using their API (running on a closed-source kernel) (with closed-source development tools) all running on a closed source MS-XBox OS...
im looking forward to the Indrema system, they look like they are doing it right... i hope they have funding