Re: Stateful Perimeter Firewall

[Joe St Sauver <joe () OREGON UOREGON EDU>]

I discussed some of the advantages and disadvantages of perimeter firewalls
in a talk I did last year:

  "Cyberinfrastructure Architectures, Security and Advanced Applications,"
  http://www.uoregon.edu/~joe/architectures/architecture.pdf

At least in some cases you may find that firewalling individual
high-value subnets may work better than just doing a perimeter firewall,
particularly if you have a large number of unmanaged machines within
the perimeter.

Regards,

Joe St Sauver (joe () oregon uoregon edu or joe () internet2 edu)
http://www.uoregon.edu/~joe/
Disclaimer: all opinions strictly my own