Wow... a pseudo-serious post from HogFly... good t'see... :)
Quote:
Originally posted here by hogfly
CP for people who want point and click firewalls ? I take it you have never modified the scripts for it then.
Actually, believe it or not, I've done a decent amount "sans gui" to it - and no, I don't mean the startup scripts. But it's not like this is anything that CP really makes known that you can do or that they "support," nor would I think it would occur to the majority of CP owners out there until they call their helpdesk with some odd problem that the GUI just can't easily touch, etc. Or unless you read phoneboy's site (is that even still around anymore?).
Quote:
Why does big business like it so much ? simple...its one of the best around, its fast, effective, and powerful.
don't need a specialist to run it ? I weep for the company that has their secretary running CP.
IMO (and I think in the opinion of the old CCSA/CCSE exams - I forget which was the bigger marketing one), it's "so simple even a secretary could run it." (ok, that's not a direct quote, but it's certainly part of their marketing BS somewhere)
Quote:
Design flaws? name one company or product that doesn't.
Fair enough. Have you tried turning off SNMP on your CP firewall though? No, no... you have to look at that one a little bit harder... Just stupid things like that tend to bug me...
(I, however, also must disclaim I haven't touched NG)
Quote:
As far as being at the bottom of your security list... are you reading upside-down ? CP has been at the forefront of the security push, they know what they are doing. If the product sucked as bad as you say then no-one would buy it.
CP has laid down the foundation for just about every up-and-coming firewall out there.
What big business does and what I do or any other security-minded professional does is often quite different. You and I know that it's simple to sell management weanies anything that appears "so wonderfully advanced and easy to understand that a secretary could run it." Look at ISS... it's the market leader but you can't tell me for one second that it's the best N-IDS implementation out there. I mean, it's not even close to the most flexible - but I can't think of many others that are as "simple" to understand and as easy to use. Simplicity has its place... in big businesses full of beaureacracy that don't have the sense to have a real security team or are so huge that the task is divided up in to many, many separate groups - none of which talk to each other if they even know each other exists. But I guess that's really who sales people want to sell to if they want to be "number 1."
The product is simple and looks snazzy... ever play with TIS' Gauntlet in the early days? Yeah, they had a GUI, but did anyone actually use it? Try selling that to some non-techie management smuck. Not gonna happen... but that product pretty much rocked (ok, ok... fine... it's a different type of firewall altogether)
Quote:
draziw: as for the flame war you would like to get into with me..it won't happen, why don't we argue about KDE vs. gnome or windows vs linux or some other senseless arguement ? catch my point ? If you like something..then by all means continue using it....You are entitled to your opinion just as I am mine. So I apologize for judging you based on your opinion. Once again, this thread is off topic.
and as for the red points...atleast have the courtesy to put your name on them.
Eh... flame war? Hardly - I'm actually not trying to flame (or be flamed) at all. You're the one that started with the "it's obvious to me you're talking out of your a**." Personally, I would love to hear what you have to say... feel free to set me straight. But, as you yourself say, we both have our own opinions and are entitled to them - perhaps my information is different than your's... perhaps I know more than I'm saying... perhaps I don't... you might never know unless you ask.
As far as red points? For what? As I said - I enjoy a good debate and you are entitled to your opinion weather I agree to it or not... that's not anything to give points over either way. Personally, if you disagree with me and give me a good argument, I'd much rather throw a few greenies your way, etc.
Anyway, I hope that helps shape some of my perspective, better... if you feel like talking further/openly, feel free to move the discussion to the firewall area.
