Re: Castles and Security

["Karl Wolfgang" <karl_wolfgang () hotmail com>]

1.  The "bastion host" / reinforced firewall concept may go the way of 
castles and the Maginot Line if dynamic defenses are not put in place.  
Clausewitz stated "If you entrench yourself behind strong fortifications, 
you compel the enemy to seek a solution elsewhere".

2.  Application programmers have begun to place other protocols within HTTP 
and HTTPS, which are allowed through most firewalls. This protocol tunneling 
means that, unless very aggressive proxies are available with a firewall, it 
won't be as effective.

3.  Telecommuter / home systems are notoriously lax on desktop security.  A 
personnel DSL connection to the Internet with static IP coupled with VPN 
tunnel into a protected network provide the devil's playground for a repeat 
of a Microsoft / QAZ exploit or something similar.

karl_wolfgang () hotmail com
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards