Re: Ports/applications permitted for Guest Access (deep packet inspection)

[Barron Hulver <Barron.Hulver () OBERLIN EDU>]

I'm not doing deep application inspection yet, but that is where I want 
to go.  (I think the whole industry is going that direction.)  I've been 
watching the next-gen firewall space and talking to others since I 
attended the Internet-2 Joint Techs conference in the summer of 2009. 
On Thursday I received a Palo Alto next-generation firewall for evaluation.


Barron

Barron Hulver
Director of Networking, Operations, and Systems
Center for Information Technology
Oberlin College
148 West College Street
Oberlin, OH  44074
http://www2.oberlin.edu/staff/bhulver/






On 9/11/11 10:39 AM, Robert Lau wrote:
> Is anybody doing protocol/application inspection?  Once ports 80/443/22/etc are allowed, an app can pump any data 
> through; it does not have to be http/https/ssh/etc.  In olden days, this would probably only be done by a clueful user, 
> but many applications do this automatically now specifically to handle port restrictions.
>
> -robert