OT: Hardware vs. Software?

  • From: Alexandre Gauthier <gauthiera@xxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 30 Sep 2005 15:55:41 -0400

Hello.

 

In an attempt to get a point of view from the "other" side, I would like to
ask what is up with the constant loathing of Hardware firewalls over here?

 

So I'd like you guys (especially Dr.Shinder, who is claiming high and loud
to whoever wants to hear it that Software firewalls such as ISA are better
than say, my Cisco PIX) to explain your point of view, so I can gather all
sides, and make an opinion for myself, and then recommend the right thing to
my clients.

 

I would like to point out that I am using ISA as a back firewall at home,
for thrills. (My home network classified as a small business one).

 

I now just hope this will not turn into a heated debate and resort to
childish name calling, but we are all adults able to debate a point here,
are we not? ;)

 

So what are the advantages and disadvantages of a hardware firewall vs.
software firewall?

 

Oh and now before someone points out that they're now more or less the same
thing, I know - Cisco PIXes are running on AMD and Intel processors, x86
ones. They're plain PCs with a hardened OS on an embedded platform. I am
saying "hardware" for the sake of knowing we are comparing something that
runs on a box with network cards and something that runs on a 1U atop the H
rack in the server room with no moving parts. Or that small metal box with
cables plugged in. So no need to be anal/pedantic about these things.

 

Now, do convince me. :-)

 

Other related posts: