[fw-wiz] Screening Router as a firewall

From: Shimon Silberschlag (shimons_at_bll.co.il)
Date: 03/24/05

  • Next message: Scott Stursa: "RE: [fw-wiz] Cisco acls" 
    To: <firewall-wizards@honor.icsalabs.com>
Date: Thu, 24 Mar 2005 15:37:57 +0200

    Hello group,

    Having a request for at least 2 firewalls protecting internet connectivity,
    would you consider a border router with ACLs as the first firewall, or would
    you demand to implement ACLs on the router and 2 other "traditional"
    firewalls?

    If you select the first option, would simple "packet filter" type ACLs
    suffice, or would you demand "stateful" ACLs?
    (I believe Cisco calls its implementation CBAC).
    If you select the second option, would you demand that the 2 firewalls be of
    different brand, different technology or can they be the same product?

    Can ISA2004 serve as the second, internal facing firewall? Anyone using it
    as such?

    TIA,

    Shimon Silberschlag

    +972-3-9351572
    +972-50-7207130

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Scott Stursa: "RE: [fw-wiz] Cisco acls"

    Relevant Pages