Re: FW: BlackIce Defender???

[ark () eltex ru]

-----BEGIN PGP SIGNED MESSAGE-----

nuqneH,

"Personal firewalls" look like not a bad thing in corporate environment
if you use it to protect workstations behind "big" firewall from each other.
Some of them include VPN encryption, distributed security policy management
and other nice features. It is possible for them to be interactive to
have ability to learn new rules prompting you for action if something
happens (like connect to unusual port and so on). Some extra 
(non-security related) functionality is also possible (like banner 
filtering).

Personal firewall is OK for dialup-connected home workstation too.

If your workstation is Unix you (for most brands) already have one.
Packet filter, at least.

If you are trying to protect the whole network by personal firewalls
_only_ it is REALLY bad, then. 

Rick Smith <rick_smith () securecomputing com> said :

> What kinds of experiences have people had with "personal firewalls?"
> Personally I've generally either lived behind a hairy chested corporate
> 'wall or I've done without at home.


                                     _     _  _  _  _      _  _
 {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
 (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
 [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBOBgTPqH/mIJW9LeBAQHNXQP/QAezIDA2MpfnMVGE6iWAOwV2utfNJpUg
TP4QbmeKEovsiGEOj0ivm/HbsA2HxVgv3yyI58zPAgyRf7KjzwVcK7uMP0s+zqx6
aSkpAmSAVhC2ECf3YdJbK5L/hTINjoFsxGePcgpW0jp6t9ZP3qWZ9IVYtTwnsdKa
BBOn4qPb2Vg=
=JKJt
-----END PGP SIGNATURE-----