Firewall Wizards mailing list archives
Re: IPS vs. Firewalls (why vs. ?)
From: Gabriele Buratti <gabriele.buratti () netasq com>
Date: Sun, 05 Feb 2006 06:34:56 +0100
Dave Piscitello wrote: > If you take issue with this, consider > that some companies who bash proxies as being performance inhibitors > bolt SSL VPNs onto their firewalls.Yep ! You still need proxies to do this SSL stuff as long as to hook an antivirus for example. Remember the old networking rule "switch when you can, route when you must" ? In this field could be read as "analize on-the-fly when you can, rewrite with a proxy when you must". This is something more than "cutting the corners" this is using the best tool available for each job.
> Marcus J. Ranum wrote: > The fundamental issue always boils down to whether your product > inherently implements default permit or default deny; what it > does with the stuff that it will, inevitably, encounter that is > outside of its knowledgebase.You have to use both approaches here: let's say our knowledgebase is the definition of http protocol as it should be. So, if you find malformed http (=non compliant) you drop it. What if you find some instant messaging traffic (you don't want in your network) that is http compliant ?
Gabriele
Attachment:
gabriele.buratti.vcf
Description:
Current thread:
- Re: IPS vs. Firewalls, (continued)
- Re: IPS vs. Firewalls ArkanoiD (Feb 02)
- Management vs. IT staff (was: Re: IPS vs. Firewalls) Patrick M. Hausen (Feb 02)
- Re: Management vs. IT staff (was: Re: IPS vs. Firewalls) ArkanoiD (Feb 03)
- Re: IPS vs. Firewalls Kevin (Feb 02)
- RE: IPS vs. Firewalls Paul Melson (Feb 07)
- Re: IPS vs. Firewalls Gabriele Buratti (Feb 03)
- Management vs. IT staff (was: Re: IPS vs. Firewalls) Patrick M. Hausen (Feb 02)
- Message not available
- Re: IPS vs. Firewalls Marcus J. Ranum (Feb 02)
- Re: IPS vs. Firewalls (why vs. ?) Gabriele Buratti (Feb 03)
- Re: IPS vs. Firewalls (why vs. ?) Marcus J. Ranum (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Dave Piscitello (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Gabriele Buratti (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Dave Piscitello (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Marcus J. Ranum (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Dave Piscitello (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Marcus J. Ranum (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Dave Piscitello (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Richard Stiennon (Feb 08)
- Re: IPS vs. Firewalls Marcus J. Ranum (Feb 02)
- Re: IPS vs. Firewalls (why vs. ?) Gabriele Buratti (Feb 08)
- Re: IPS vs. Firewalls ArkanoiD (Feb 02)
- Re: IPS vs. Firewalls (why vs. ?) Chris Byrd (Feb 08)
- RE: IPS vs. Firewalls (why vs. ?) Ben Nagy (Feb 07)
- Re: IPS vs. Firewalls (why vs. ?) Gabriele Buratti (Feb 08)