Re: [fw-wiz] Application Intelligent vs ALG

From: Tony Miedaner (miedaner_at_twcny.rr.com)
Date: 06/23/03

  • Next message: Tony Miedaner: "Re: [fw-wiz] Application Intelligent vs ALG" 
    To: SimonChan@lifeisgreat.com.sg, firewall-wizards@honor.icsalabs.com
Date: Mon, 23 Jun 2003 17:39:30 -0400

    I attended an event where they discussed this. Basically, what you pay for
    with Checkpoint is Inspect. What they are doing is making it easier for
    you to create inspect code. Basically it has always been there with
    inspect it just that you had to write an inspect script and really know
    what you are doing to use it. Some of the SmartDefense write-ups indicate
    what you are going to be able to do.

    Will it scale to thousands of little scripts? Can't answer that.

    Does it provide any better coverage than a proxy. Maybe or Maybe Not. I
    guess as everything it depends what you are comparing it against.

    Like anything if it doesn't do a single particular function that you need
    then it is kind of useless.

    At 09:36 AM 6/19/2003 +0800, SimonChan@lifeisgreat.com.sg wrote:
    >Hi fw-wiz,
    >
    >check point recently came up with a new module called Application
    >Intelligence which does
    >"deep packet inspection".
    >
    >Has anyone used this AI module before ?
    >
    >How does this compare with against traditional application proxy (ALG)
    >firewalls like gauntlet/CyberGuard/Borderware ?
    >
    >tks.
    >
    >
    >Rgds,
    >
    >Simon Chan, MCP/MCSA/CCNA/CCSA/WCSP
    >Senior Security Engineer
    >
    >------------------------------------------------------------------------------------
    >
    >"My statements in this message are personal opinions
    >which may have no basis whatsoever in fact."
    >
    >
    >
    >
    >---------------------------------------------------------------------------------
    >
    >CONFIDENTIALITY CAUTION :
    >The email is only for the use of the person or entity to whom it is
    >addressed and contains information that is privileged and confidential. If
    >you, the reader of this email are not the intended recipient, any
    >distribution, copying or dissemination of this email is strictly
    >prohibited. If you have received this email in error, please contact the
    >sender immediately by return email and delete this email. Thank you. Please
    >visit our website at http://www.lifeisgreat.com.sg.
    >
    >---------------------------------------------------------------------------------
    >
    >
    >_______________________________________________
    >firewall-wizards mailing list
    >firewall-wizards@honor.icsalabs.com
    >http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Tony Miedaner: "Re: [fw-wiz] Application Intelligent vs ALG"

    Relevant Pages

    • Re: BSDstats v3.0 - The Security Rewrite
      ... Some sites require the use of a proxy for HTTP access. ... The bsdstats script could easily pick up that entry and set ... a management machine, and that management machine only has ...
      (freebsd-questions)
    • Re: BSDstats v3.0 - The Security Rewrite
      ... Seaman to come up with a more "security sensitive" version of BSDstats ... ... Some sites require the use of a proxy for HTTP access. ... The bsdstats script could easily pick up that entry and set ... a management machine, and that management machine only has ...
      (freebsd-questions)
    • Re: x.500 Addresses ?
      ... I wrote a script a few ... Function StampMembers (strGroupADsPath, dicSeenGroupMember) ... Currently we have Exchange Server 2003 SP1 servers in an AD forrest. ... Would a X.500 proxy address help, if so how do I do that? ...
      (microsoft.public.exchange.admin)
    • Re: [SLE] slow reiserfs?
      ... >> script is running diff on each pair. ... and that you're not comparing all the possible combinations ... the shell does a lot of ... Keep in mind, too, that when you use Perl to invoke external commands such ...
      (SuSE)
    • Solution for XML-RPC over a proxy
      ... I couldn't get my xml-rpc script to work via a corporate proxy. ... def request: ...
      (comp.lang.python)