Firewall Wizards mailing list archives

Re: Forrester Research foresees death of firewalls


From: Adam Shostack <adam () homeport org>
Date: Mon, 21 Jun 1999 11:02:57 -0400

On Sun, Jun 20, 1999 at 12:21:09PM -0700, David LeBlanc wrote:
| At 10:42 PM 6/16/99 -0400, Adam Shostack wrote:
| 
| >Firewalls enter into the picture only as a perimiter tool; you ensure
| >data only gets in on two or three points.  The real security will need 
| >to be on the servers.  Lets stop trying to pretend firewalls are
| >anything more than a stopgap.
| 
| I can't agree that firewalls are only a stopgap.  I do agree that it is a
| tremendous fallacy to think that because you have a firewall, your network
| is now secure.

A useful stopgap, I'll grant.  But I am reasonably firmly convinced
that security needs to become focused at the application layer, and in 
that model, firewalls get less and less of the total attention of a
security group.

Adam




-- 
"It is seldom that liberty of any kind is lost all at once."
                                                       -Hume




Current thread: