Front cover - IBM Redbooks

122 Lotus Security Handbook
Note: We do not endorse any one firewall product and do not claim to have
exhaustively tested the firewall products listed. Inclusion on this list should
not be considered to imply suitability; likewise, exclusion from the list does
not imply unsuitability.
Check Point Firewall-1
Check Point Firewall-1 is a popular firewall based on the Redbook team’s
experience at client sites. A management module allows the compilation of rules
to determine firewall configuration. Once installed, the default configuration
allows nothing through the firewall in either direction. The rules need to be
defined to start allowing traffic to flow.
Standard features of Firewall-1 include stateful inspection and address
translation (NAT). Check Point has integrated products for facilities, such as
virtual private network (VPN).
For more information, see the Redbook Check Point FireWall-1 on AIX: A
Cookbook for Stand-Alone and High Availability, SG24-5492, or refer to Check
Point’s Web site:
http://www.checkpoint.com
Cisco PIX
The Cisco PIX firewall is a dedicated firewall appliance in Cisco's firewall family.
Cisco PIX is an example of a firewall that has the concept of secure and
less-secure sides under the default configuration. This means that one side of
the firewall is trusted by default (for example, the DMZ) and that all traffic from
the trusted or more secure side can flow through the firewall. By default, all traffic
in the other direction is disabled until specific rules are defined to allow traffic to
flow. For more information, refer to Cisco’s Web site at:
http://www.cisco.com
Raptor Firewall
Raptor Firewall is a firewall solution from Axent Technologies, a subsidiary of
Symantec. Features include the Raptor Management Console (RMC) for easy
management of local and remote firewalls, standards-based VPN support (IPSec
and Internet Key Exchange (IKE)) for connecting to remote offices and users,
and firewall-integrated content blockers for filtering WWW and Internet Usenet
groups. For more information, see the Symantec product Web site at:
http://www.symantec.com