Re: Air gap technologies

[Frederick M Avolio <fred () avolio com>]

At 03:28 PM 1/22/01 -0800, Aleph One wrote:
> They
> are functionally identical to systems implemented without an "air gap".
> A better name would be something along the lines of a "dual-host
> proxies" or a "peephole proxies".

And, I think, this is why communication like this is sometimes very 
difficult. I refer to the mailing list, not an air gap. *OF COURSE* it is 
functionally equivalent. The question is always HOW that function is achieved.

That is fundamental to any discussion like this. A stateful inspection 
firewall is functionally equivalent to a proxy-based firewall. How they 
achieve security is exactly the important difference.


Fred
Avolio Consulting, Inc.
16228 Frederick Road, PO Box 609, Lisbon, MD 21765, US
+1 410-309-6910 (voice) +1 410-309-6911 (fax)
http://www.avolio.com/

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards