Re: [fw1-gurus] Checkpoint NGX (R65) IPSO 4.2

[Adam Carter <Adam.Carter@xxxxxxxxxxxx>]

> Hello All - I am being asked by my applications team to setup reverse proxy on my Checkpoint so they don't have to buy MS ISA.  I have read it can be done, my question is should it be done?  Are there performance issues to consider?

Hmm,
- Do they just want to present the webserver(s) using a public address (if so, just NAT it)
- Do they need any layer 7 functionality (URL redirection/rewriting/load balancing)?
- Do they want caching?
- IMO it would almost certainly be better to run up a Squid or Apache box for this, unless NAT will suffice



_______________________________________________
fw1-gurus mailing list
fw1-gurus@xxxxxxxxxxxxxxxxxx
http://lists.phoneboy.com/listinfo.cgi/fw1-gurus-phoneboy.com