RE: [fw-wiz] AS2 security protocol

From: Dick Brooks (dick_at_tech-comm.com)
Date: 07/31/03

  • Next message: Marcus J. Ranum: "Re: [fw-wiz] Off topic: Any one know of a good IPV6 reference book?"
    To: "Malte von dem Hagen" <DocValde@gmx.de>, "'Firewall Wizards ML'" <firewall-wizards@honor.icsalabs.com>
    Date: Thu, 31 Jul 2003 17:29:39 -0400
    
    

    Malte,

    You should be able to utilize existing HTTP filtering functions because AS2
    uses HTTP as a "carrier" and most of the "header" data is passed as HTTP
    headers. If you have to scrutinize the "payload" you will have other
    challenges because the data is "usually" encrypted.

    Dick Brooks
    B2B Integration and Cyber Security Consultant
    http://www.tech-comm.com/dbc
    Mobile:602-684-1484
    eFax:240-352-0714

    -----Original Message-----
    From: firewall-wizards-admin@honor.icsalabs.com
    [mailto:firewall-wizards-admin@honor.icsalabs.com]On Behalf Of Malte von
    dem Hagen
    Sent: Thursday, July 31, 2003 1:13 PM
    To: 'Firewall Wizards ML'
    Subject: [fw-wiz] AS2 security protocol

    Hi there,

    has anyone of you experiences in firewalling th AS2 protocol?
    It seems to be a protocol to securely exchange documents via http.
    Nothing special if you use packet filters, but how about proxies and
    things like the Cisco PIX "fixup"-feature?

    >From my knowledge and understanding i would say "no problem, since it
    only regards the payload", but some other opinions would be helpful.

    TIA && regards,

    Malte.

    --
    Malte von dem Hagen
    DocValde@gmx.de
    http://www.docvalde.net/
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    

  • Next message: Marcus J. Ranum: "Re: [fw-wiz] Off topic: Any one know of a good IPV6 reference book?"

    Relevant Pages