Re: [Theory] Time for a new FWTK? (long)

[Ted Doty <ted () iss net>]

At 02:54 PM 12/1/97 -0600,
Rick_Giering_at_mpg003 () ccmailgw mcgawpark baxter com wrote:

[snip]

>        9) IPv6 and IPSec will only make the firewalls job tougher as 
>     developers use its security features as an excuse to "go around the 
>     firewall."

Probably the only good reason for key escrow is so that your firewall can
peek inside IPSec sockets.

- Ted

--------------------------------------------------------------
Ted Doty, Internet Security Systems | Phone: +1 770 395 0150
41 Perimeter Center East            | Fax:   +1 770 395 1972
Atlanta, GA 30346  USA              | Web: http://www.iss.net
--------------------------------------------------------------
PGP key fingerprint: 362A EAC7 9E08 1689  FD0F E625 D525 E1BE