RE: PIX sux? (know Stateful vs Application)

[David Lang <dlang () diginsite com>]

On Mon, 27 Dec 1999, Shaun Moran wrote:

> I agree that Stateful technologies (i.e.: Layer 3) will not stop against
> application level attacks, but also there are serious risks with Proxy
> (application Level) technologies if they do not protect the firewall itself
> against Layer 3 attacks.
>
> Application level firewalls could have the ability to stop against
> application attacks (i.e.: MS RDAC) but how many of them actually do protect
> against these attacks ??? Most application level Firewalls I know simply
> relay the HTTP request to the Internal Servers.

I just put in a Raptor firewall and discovered that it does do more
detailed checking of http then previous stateful inspection firewalls
did. I ran into a site that generated non-printable characters in it's
cookies which were blocked (with an error) by the firewall. 

David Lang