Re: Re: fragroute vs. snort: the tempest in a teacup

[Jason Haar <Jason.Haar () trimble co nz>]

On Thu, Apr 18, 2002 at 03:33:53PM -0400, Francis Cianfrocca wrote:
> Sorry for changing the subject, but what is the general state of the art 
> on application-level firewalls? Are any of them ready for prime time?

WHAT!?!?!

Sorry, that caught my eye. Application firewalls are OLDER than the
so-called "new-improved" NAT-style jobbies. As Doug says, they are
inherently resistent to many things that are problematic on NAT firewalls -
but are now falling out of vogue because NAT firewalls are "easier". I
should know - I was an application-firewall envangelist until I was hammered
down by "progress" :-/

BTW: Application firewalls typically means "proxy servers" :-)

-- 
Cheers

Jason Haar

Information Security Manager
Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users