Re: Proxy 2.0 secure? (AG vs. SPF)

[tqbf () pobox com]

> no pass.  Products like FW-1 and PIX
> do both.  Are they SPFs or not?

They are not SPFs. They may use SPFs, but they, like all firewalls, employ
a variety of different access control mechanisms. 

My assertion is that the aspects of FW-1 that rely on stateful filtering
are less secure than the aspects which rely on proxying.

-----------------------------------------------------------------------------
Thomas H. Ptacek                           SNI Labs, Network Associates, Inc.
-----------------------------------------------------------------------------
http://www.pobox.com/~tqbf       "If you're so special, why aren't you dead?"