- Apr 23, 2001
- 2,331
- 7
- 81
.. And no, I'm not talking about Star Trek.
I'm embarking on a small project - Rebuild everything to do with Internet connectivity at my company. Scope is rather broad - 50,000 users in about 2,000 offices (Mostly small branch offices with just a few users), scale to 100,000 users in 3,500 offices.
I've got a pretty good vendor list and ideas on what I'm going to be doing, but I could use some feedback for those of you who have some experience in this environment.
Some items that I could use some recommendations on are:
Proxy servers (Leaning towards Network Appliance)
Antivirus Scanners (Trend Micro?)
Applet/Java scanners (Finjan?)
One biggie that I could really use some input on - Where to insert my scanners. With Checkpoint, I can use OPSEC plug-ins at the firewall to send data to be scanned. With Network Appliance, I can use their ICAP protocol to have the proxy send data to be scanned. I can also use the scanners in "native proxy" mode, but don't plan on using it. Doesn't work so hot and is very slow. Any input that people have on this one would be good. Looking for best performance and something that can do both code scanning AND anti-virus scanning in parallel, not in serial to cut down on processing time. Scanners will likely be Sun 420's.
Also, anyone used Qwest as their business ISP? They have a large presence at one of my sites and I might use them as a redundant connection to UUNet (Worldcom, whatever you want to call them). Likely end up with an OC3 from both, probably start with a DS3.
- G
I'm embarking on a small project - Rebuild everything to do with Internet connectivity at my company. Scope is rather broad - 50,000 users in about 2,000 offices (Mostly small branch offices with just a few users), scale to 100,000 users in 3,500 offices.
I've got a pretty good vendor list and ideas on what I'm going to be doing, but I could use some feedback for those of you who have some experience in this environment.
Some items that I could use some recommendations on are:
Proxy servers (Leaning towards Network Appliance)
Antivirus Scanners (Trend Micro?)
Applet/Java scanners (Finjan?)
One biggie that I could really use some input on - Where to insert my scanners. With Checkpoint, I can use OPSEC plug-ins at the firewall to send data to be scanned. With Network Appliance, I can use their ICAP protocol to have the proxy send data to be scanned. I can also use the scanners in "native proxy" mode, but don't plan on using it. Doesn't work so hot and is very slow. Any input that people have on this one would be good. Looking for best performance and something that can do both code scanning AND anti-virus scanning in parallel, not in serial to cut down on processing time. Scanners will likely be Sun 420's.
Also, anyone used Qwest as their business ISP? They have a large presence at one of my sites and I might use them as a redundant connection to UUNet (Worldcom, whatever you want to call them). Likely end up with an OC3 from both, probably start with a DS3.
- G
Facebook
Twitter