RE: Leader in firewall product

[Laura Taylor <ltaylor () technologyevaluation com>]

I wrote a review that was posted on the TEC Security Index called "Can
Network Associates Sell Guantlet?" I wrote this article after spending
considerable time with two Network Associates employees and talking to many
customers, exchanging email with many security professionals, and reviewing
many technical sources. Network Associates bombarded TEC with enough
threats, emails, and phone calls from their legal team, that we took the
article down. Anyone wanting to know more can write to me directly. 

No, my tires have not been slashed...yet.

Laura

-----------------------------------------------------------
L. P. Taylor
Director, Security Research
Technology Evaluation Center (TEC)

TEC Security Index
http://www.technologyevaluation.com/Research/ResearchHighlights/Security/ind
ex.asp

Phone:  781-376-2813
Fax:      781-756-0245


-----Original Message-----
From: Rick Murphy [mailto:rmurphy () mitre org]
Sent: Monday, September 18, 2000 3:19 PM
To: Magosányi Árpád
Cc: firewall-wizards () nfr net
Subject: Re: [fw-wiz] Leader in firewall product


At 10:27 AM 9/18/2000 +0200, =?iso-8859-2?Q?Magos=E1nyi_=C1rp=E1d?= wrote:
> > > -Borderware
> Borderware is just a hardened Gauntlet running on a hardened BSD.
> (Okay, maybe it isnt gauntlet, but the feeling is the same).
> It has an ST which claims it to be EAL4, but I cannot imagine
> how could that ST got evaluated (not big issues, but I had
> some formal problems with it). It seems really a secure one
> for the old-type internet firewall usage, I say it from
> experience. But do not hit it with big traffic.

Gauntlet was ITSEC evaluated at E3, which is roughly equivalent to EAL4.
As you may know, it's all in how much security the ST provides ;-)
There's lots of EAL3 firewalls around; some of them conform to the NSA 
firewall PP set, some don't.

The company that built Borderware was once a Gauntlet reseller - that may 
explain the similarities between Borderware and Gauntlet.
         -Rick



_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards

_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards