RE: Multiple firewalls from different manufactureres

[MHawkins () TULLIB COM]

Interesting, it just occurs to me that you could implement RFC's in
programmable logic arrays.

Then your firewall would be much less hackable. Indeed, you would have a
very strong security story if you could point to an appliance that had
anything above layer 3 deployed in programmable logic arrays.

I think the end point of that would be RFC on ASIC's.

Hmmmmmm...

-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com]On Behalf Of Behm,
Jeffrey L.
Sent: Friday, January 28, 2005 4:02 PM
To: firewall-wizards () honor icsalabs com
Subject: RE: [fw-wiz] Multiple firewalls from different manufactureres


> From Eugene Kuznetsov
> > Of Keith A. Glass
>
> > I just wish some of the vendors 
> > would allow their FW solution to be available outside the 
> > "appliance" vehicle (Yes, I'm talking about Symantec and 
> > Secure Computing. . .)
>
> Hmm, this is pretty interesting, because it's contrary to what I hear
> elsewhere. Could you talk about why you would rather get software
instead of
> a sealed appliance -- ignoring, for the time being, the cases where the


Before MJR can chime in (with the same, time-tested-true answer each
time)...

It's *all* software at some point...how it's packaged is somewhat
unimportant,
although I'll take a command line interface, where I can get into the
guts
and make changes, improvements, or tailoring to fit my environment over
a point-click-and-hope interface and "sealed" appliance that either fits
in my environment or it doesn't.

Why pay for the seck-sy, pretty "appliance," if you don't have to?
(Other than
because some vendor has the ear of mgmt)
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
"Disclaimer: This electronic mail is intended only for the use of the
addressee(s)named herein. Unless otherwise specifically stated, the views
contained and expressed in this electronic mail are strictly those of the
individual sender and are not the views of the Company or any of its
Directors or other employees. If you are not the intended recipient of this
electronic mail, you are hereby notified that any dissemination,
distribution or coping of this electronic mail is strictly prohibited. If
you received this electronic mail in error please immediately notify us by
return electronic mail and delete this electronic mail from your system."
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards