[geeks] Firewall recommendation?

[Sridhar Ayengar]

Mike Meredith wrote:
> On Tue, 06 Dec 2005 16:23:27 -0500, Sridhar Ayengar wrote:
> 
>>I'm not sure what you mean by "low maintenance", but I've found that
>>the  firewall functionality in recent Cisco IOS is pretty nice.  It's
>>not  quite at the same level as PIX, but I've found it satisfactory so
>>far.
> 
> 
> The more I learn about Cisco, the less impressed I get. Ignoring their
> academic support which is abysmal, you can come across some more serious
> issues. Latest I've discovered is that Cisco switches sometimes seem to
> misdirect (actually it gets delivered to multiple places) unicast
> traffic on a VLAN.
> 
> And for amusement, ask someone from Cisco about stateful inspection of
> ICMP applications. At least the people we've asked can't understand the
> question.

They're support is indeed pretty bad, but their documentation is quite 
good.  I've never had much trouble finding anything.

Plus, I've heard good things about their training programs.  Supposedly 
they're taught by people with real experience.

Peace...  Sridhar