Sygate Pro or Jetico & CHX-I (Snort)

Yes that is my opinion, maybe I should of qualified that better when I made the original posting.

Sorry I think mis-understood your original post, but I see your point.

 

does sygate still make firewalls?

 

Again, I'm not trying to argue, just understand.

Are you saying that CHX-I as an SPI firewall is somehow better / different than another SPI firewall inside a hardware firewall (assuming similar level of stateful inspection on both)?

I don't understand what you mean.

There are hardware firewalls with outbound SPI in the market...

Both the software and hardware SPI firewalls do the same thing (yes, they can have different levels of SPI checking, but they do the same thing if they are implemented equally well).

Besides, the best of the hardware firewalls (not that we are discussing them here) are hybrids any way (with application layer and session state both being checked).

That's true. However, you can look at the statistics:

The number of Win32 boxes compromised each year

vs

The number of hardware firewalls compromised each year

Sure, but not better than a HARDWARE SPI firewall, right?

If you think it is somehow better, please explain to me once more: how?

best regards,
halcyon

 

Well I decided in the end to revert back to Jetico, with CHX-I and Samsnort.

Jetico has a small overhead compared with sygate pro, and being free is always a bonus lol