Evolution of Firewalls

[<skpoo () pacific net sg>]

Hi, I am currently evaluating several types of firewalls for the company. 

Our team is currently debating if Stateful Deep Inspection firewall is going be the new technology to replace the 
Application Proxies firewall which deem to be most secure currently.

I personally feel that Deep Inspection firewall is less reliable as we know that it only blocks what is known to be 
bad. This seems to be less effective and become an never-ending arm race where Deep Inspectioin firewall requires the 
most updated bad list all the time.

On the other hand, Application Proxies firewall only allows what is known to be good. This makes the defence become 
more effective as we know good things do not change as frequently as bad things.

Any input would be very much appreciated.

Kang
 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards