RE: Leader in firewall product

[Frank Pawlak <fpawlak () execpc com>]

Hi Laura

I would like to know more about this issue.  If you have a copy of the 
review I would sure appreciate having it.  No I don't work for NAI, just in 
case you are curious.

It is unfortunate, but not surprising, that they would crush some solid 
information.  From what I have heard they have messed up what was once a 
pretty good platform.

Best regards.

Frank Pawlak

At 04:02 PM 9/18/2000 -0400, you wrote:
> I wrote a review that was posted on the TEC Security Index called "Can
> Network Associates Sell Guantlet?" I wrote this article after spending
> considerable time with two Network Associates employees and talking to many
> customers, exchanging email with many security professionals, and reviewing
> many technical sources. Network Associates bombarded TEC with enough
> threats, emails, and phone calls from their legal team, that we took the
> article down. Anyone wanting to know more can write to me directly.
>
> No, my tires have not been slashed...yet.
>
> Laura
>
> -----------------------------------------------------------
> L. P. Taylor
> Director, Security Research
> Technology Evaluation Center (TEC)
>
> TEC Security Index
> http://www.technologyevaluation.com/Research/ResearchHighlights/Security/ind
> ex.asp
>
> Phone:  781-376-2813
> Fax:      781-756-0245
>
>
> -----Original Message-----
> From: Rick Murphy [mailto:rmurphy () mitre org]
> Sent: Monday, September 18, 2000 3:19 PM
> To: Magosányi Árpád
> Cc: firewall-wizards () nfr net
> Subject: Re: [fw-wiz] Leader in firewall product
>
>
> At 10:27 AM 9/18/2000 +0200, =?iso-8859-2?Q?Magos=E1nyi_=C1rp=E1d?= wrote:
> > > > -Borderware
> >Borderware is just a hardened Gauntlet running on a hardened BSD.
> >(Okay, maybe it isnt gauntlet, but the feeling is the same).
> >It has an ST which claims it to be EAL4, but I cannot imagine
> >how could that ST got evaluated (not big issues, but I had
> >some formal problems with it). It seems really a secure one
> >for the old-type internet firewall usage, I say it from
> >experience. But do not hit it with big traffic.
>
> Gauntlet was ITSEC evaluated at E3, which is roughly equivalent to EAL4.
> As you may know, it's all in how much security the ST provides ;-)
> There's lots of EAL3 firewalls around; some of them conform to the NSA
> firewall PP set, some don't.
>
> The company that built Borderware was once a Gauntlet reseller - that may
> explain the similarities between Borderware and Gauntlet.
>          -Rick
>
>
>
> _______________________________________________
> Firewall-wizards mailing list
> Firewall-wizards () nfr net
> http://www.nfr.net/mailman/listinfo/firewall-wizards
>
> _______________________________________________
> Firewall-wizards mailing list
> Firewall-wizards () nfr net
> http://www.nfr.net/mailman/listinfo/firewall-wizards


_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards