Persistent Connection

[Big Geek <geeky_1 () mail com>]

I am arguing against a request to allow  a connection from within the Internal network to the Outside because it needs 
to be a persistent connection.  I can lock it down by source and destination and it will be put through a plug proxy.  
The connection stream is 3DES encrypted.  Which are all good things but I am uneasy about a persistent connection.  My 
stand has been that it is much higher risk to leave a connection open than to allow an intermittent connection.  My 
argument is weak in facts.  Can the group either direct me to a good source or  provide information on why I should 
continue the fight.

The pointy hair boss "I know what TCP stands for. -- Terminate, Cut Personnel"


........................................................ 
iWon.com       http://www.iwon.com     why wouldn't you? 
........................................................

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards