It always amazes me on how anything related to command line or anything that is text only will make many Windows admins automatically say it's hard or unpleasant. I for one, think text mode = light, which = simplicity. It's not that counter intuitive, but simple - and thus less error prone, more straightforward. I don't need tha bling bling. But then again that is my opinion. Having manual also ensures you have competent administrators :-) Blind patching is my personal equivalent of Dr.Shinder's "hardware firewall" or the "open port button". But you know discussing this point on a ISA mailing list is pointless, since I assume most of those who moan about Cisco to be doing ISA for a living - it's what they know best. On a Cisco mailing list, that would be different, since they know Cisco best, and probably only vaguely heard of ISA and ditch it in the same way. It all comes to an e-peepee size fight that comes stunningly close to downright fanboyism. And somehow making posts just to ditch the lastest PIX or anything cisco does that is wrong strikes me as vaguely childish and reeks of self-justification, somehow... I don't know. I try to stand neutral in my recommendations. _____ De : Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Envoyé : 31 octobre 2005 08:01 À : [ISAserver.org Discussion List] Objet : [isalist] RE: Nortel ISA Hardware Firewall http://www.ISAserver.org I think that it could be easier, less-manual. I've dont it several times myself, but I don't find it amusing to do. Cisco could do some better research to make things better to upgrade and maintain. Tiago de Aviz SoftSell - Curitiba (41) 3340-2363 www.softsell.com.br <http://www.softsell.com.br> Esta mensagem, incluindo seus anexos, tem caráter confidencial e seu conteúdo é restrito ao destinatário da mensagem. Caso você tenha recebido esta mensagem por engano, queira por favor retorná-la ao destinatário e apagá-la de seus arquivos. Qualquer uso não autorizado, replicação ou disseminação desta mensagem ou parte dela é expressamente proibido. A SoftSell não é responsável pelo conteúdo ou a veracidade desta informação. >>> thor@xxxxxxxxxxxxxxx 30/10/2005 17:00 >>> http://www.ISAserver.org <http://www.ISAserver.org> Hi Dr. Shanker- I have several about the country at my different facilities- mainly for t1's and integrated voice/data circuits. Damn good routers, if you asked me. I've got some that are still in operation after 8 years of constant use, and have never had a single problem with any of them-not even a fan going out. But yes, it is that sort of performance that make people forget they even have them, and thus, do not think they need attention. I totally agree with you on that point. If Pescatoodles had any real insight (as you do) then he would have made that point rather than blithe on about how "really really really hard" it is to update the IOS. But hey, it may actually be really, really, really hard for him. Copying over a .bin file, or just replacing one in the tftp boot server and cycling the router is something my 4 year can do, but I guess not everyone has his skilz ;) t