Re: Firewalls that generate new packets..

[Dave Piscitello <dave () corecom com>]

Not certain what you mean when you limit the discussion to 
Internet-enabled software vendors but I am pretty certain that everyone 
who runs an SSL VPN is running a proxy of some sort.

Aren't many VoIP-aware firewalls glorified SIP proxies that try to make 
SIP secure in the absence of anything in the session initiation protocol 
that one might consider a security feature? If I recall, SIP is one of 
the many IETF protocols that has a  "Security" section that says, "yep, 
there are security issues with this protocol but hey, never let security 
stand in the way of a disruptive technology..."


Paul D. Robertson wrote:
> On Mon, 19 Nov 2007, Paul Melson wrote:
>
> > and has a miniscule share of the total firewall market.  Of course, Cisco,
> > Check Point, and most of their competitors have proxies.  Proxy firewalls
> > are dead.  Long live proxy firewalls.
>
> But if my experience with Internet-enabled software vendors is anywhere 
> near common, nobody's enablign the proxies.
>
> Paul
> -----------------------------------------------------------------------------
> Paul D. Robertson      "My statements in this message are personal opinions
> paul () compuwar net       which may have no basis whatsoever in fact."
>              http://www.fluiditgroup.com/blog/pdr/
>            Art: http://PaulDRobertson.imagekind.com/
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () listserv icsalabs com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

Attachment: dave.vcf
Description:

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards