Re: Novell Bordermanager certification

[Phil Waterbury <pwaterbury () icsa net>]

At 01:46 PM 10/5/98 -0400, you wrote:
> > Can anyone tell me specifically why Bordermanager has failed to become ICSA 
> > certified?  Even though the value of certification may mean different 
> > things to different folks, the fact that it hasn't been certified creates 
> > some questions.
>
> The fact that they haven't been certified tells me they weren't willing
> to pay upwards of $40,000 to have ISS run against their product. Sure,
> ICSA does "other tests" above and beyond running ISS but they never
> (to my knowledge) have enumerated them. There are lots of other holes
> in the notion of certification of firewall products, which have been
> enumerated elsewhere.

Please go to this address:
<http://www.icsa.net/services/consortia/firewalls/certification.shtml> [Our
Firewall Criteria] and about a quarter of the way down (Under Commercial
testing tools) it lists a couple of the commercial tools sets we use.  Also
it should be noted that Novell *is* a member of our Firewall Consortia.

[snip]

> mjr.
> (Note: I don't particularly have anything personal against ICSA, I
> just believe that what they are doing has no merit. Many of the
> folks I know who work there are decent people.)

Thanks.  Some of us try ;-)

Phil

Phil Waterbury <pwaterbury () icsa net>
International Computer Security Association, Inc.
Network Security Lab Analyst