Re: How stateful is stateful inspection?

[David Lang <dlang () diginsite com>]

-----BEGIN PGP SIGNED MESSAGE-----

we did not actually install firewall-1, I am just going by what checkpoint
stated as they were trying to sell it to us.

David Lang

On Thu, 15 Jul 1999, Sean Costello wrote:

> Date: Thu, 15 Jul 1999 12:05:38 -0500
> From: Sean Costello <xlate () home com>
> Reply-To: Sean Costello <xlate () iname com>
> To: David Lang <dlang () diginsite com>
> Cc: Lance Spitzner <spitzner () dimension net>, firewall-wizards () nfr net
> Subject: Re: How stateful is stateful inspection?
>
> > David Lang wrote:
> >
> > Having just gone through an evaluation of firewall-1 I would like to point
> > out that they reccomend NOT to turn on the optional defragmentation
> > capibility for performance/memory reasons.
>
>
> I think you may be confusing the defragmentation engine with Syn 
> Defender since there is nothing optional about the way FW1 handles 
> these packets since at least 3.0b...if not 3.0a.
>
> Sean

"If users are made to understand that the system administrator's job is to
make computers run, and not to make them happy, they can, in fact, be made
happy most of the time. If users are allowed to believe that the system
administrator's job is to make them happy, they can, in fact, never be made
happy." 
- -Paul Evans (as quoted by Barb Dijker in "Managing Support Staff", LISA '97)

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEVAwUBN4zg5z7msCGEppcbAQHG5gf/RQzjeCsTe66mC4Zh/gM6+r/2u4FNnkNI
Rc32s+d2Q2eU/fUeou3AHGcvlFaZ0ha1whlhn+418d3v88KtWKrloiZRnFbMNNz3
HS2/8OBku0dc+uGyhB3PK0LiE1EBoRiIgoTCySMptMNAKFGIawS2w0o/sabSm/cn
jwW72jqrc1j8sTl5rWTEvbbqsgNjcQ5D0i0Hp0O4xRptTFC37nEfMBnvPpd4Oh0I
lyz27Lv0XAF4eOLB/fXBJAE6yNxseO4PNLesmmwTYRdIfKhYIh50XiDUD/2f/Eg+
+7U/aFArlLWmAcWAsXx6fkI1Ustbb61OywNzXQNNjigNCvkIIERRbA==
=p1u+
-----END PGP SIGNATURE-----