Re: SecureZone Firewall

[Jeffery.Gieser () minnesotamutual com]

#How good is this Firewall as compared to CISCO PIX Firewall or CheckPoint
#Firewall-1?

        The SecureZone firewall is made by Secure Computing.  In its
current release it is a decent firewall.  It is an application layer
gateway and it runs on a twisted version of Type Enforcement (Secure
Computing's Trusted OS design) and chrooting.  Secure Computing combined
the Borderware firewall (when they owned it during Borderware V3 and V4)
and Sidewinder into SecureZone.  It was pretty bad in the first release or
two.  It runs on an BSDI 4.1 kernel(I think).  Because of these points, I
would consider it much more secure that the PIX or Firewall-1.  It is not
as fast as either of those two firewalls, though.  There was a very
interesting design philosophy behind the firewall.  In a traditional
firewall there is an internal side, an external side, and maybe some dmzs.
The SecureZone called everything zones and they were all functionally
identical.  Zones were not tied down to one NIC so you could come in on
different NICs and still be forced to follow the same firewall rules.  It
was intended to be a secure VPN termination point that could perform
advanced filtering.  If you are going to buy a product from Secure
Computing then buy Sidewinder.  It is a much better product, much more
mature, and it is the future of the company.

Regards,
Jeffery Gieser




                                                                                                       
                    owner-firewall-wizards(a                                                           
                    )lists.net                      To:     Jeffery B Gieser/Minnesota                 
                    [INTERNET.LISTSERV]@SSW         Mutual@MINNESOTA MUTUAL                            
                                                    cc:                                                
                    05/04/2000 09:50 PM             Subject:     [fw-wiz] SecureZone Firewall

Attachment: fwwizSec
Description: