[fw-wiz] Firewalls acting as access controllers

From: Green Horn (teachgreenhorn_at_yahoo.com)
Date: 05/25/05

  • Next message: Siju George: "[fw-wiz] Is NAT in OpenBSD PF UPnP enabled or Non UPnP?" 
    To: firewall-wizards@honor.icsalabs.com
Date: Wed, 25 May 2005 08:15:05 -0700 (PDT)

    Hi,
     I am new to firewalls.
    Do firewalls provide dynamically defined access
    control i.e., can they act as access controllers.
    e.g., it should be able to do the following, a user
    tries to access a resource, the packets would come to
    the firewall, if they are HTTP packets and the user is
    new (from IP address not being in the authenticated
    list), the packets would be redirected to a webproxy,
    the webproxy tries to get the user authenticated by a
    AAA server (say RADIUS), the firewall would get an
    authorization message from the AAA server (or
    webproxy), saying the time the user must be allowed
    access, the resources he can access etc.
    The firewall would provide that access.

    Can this be done by the firewalls in the market such
    as Checkpoint firewall-1

            greenhorn.

    __________________________________________________
    Do You Yahoo!?
    Tired of spam? Yahoo! Mail has the best spam protection around
    http://mail.yahoo.com
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Siju George: "[fw-wiz] Is NAT in OpenBSD PF UPnP enabled or Non UPnP?"

    Relevant Pages

    • RE: Routers, Switches, and Firewall testing
      ... We have been using the ISIC tool suite. ... random packets of the target protocol. ... specify the source and destination port along with the IP. ... While the test above is not "realistic" as firewalls generally do not recive ...
      (Pen-Test)
    • Re: Stateful Inspection
      ... >> A stateful firewall can inspect the contents of the packets as well. ... > VisNetic Firewall falls into a class of firewalls called Stateful ... Stateful inspection firewalls overcome the ...
      (comp.security.firewalls)
    • Re: Stateful Inspection
      ... >> A stateful firewall can inspect the contents of the packets as well. ... > VisNetic Firewall falls into a class of firewalls called Stateful ... Stateful inspection firewalls overcome the ...
      (comp.security.firewalls)
    • Re: Stateful Inspection
      ... > A stateful firewall can inspect the contents of the packets as well. ... Stateful Packet Inspection ... VisNetic Firewall falls into a class of firewalls called Stateful ... Stateful inspection firewalls overcome the ...
      (comp.security.firewalls)
    • Re: Stateful Inspection
      ... > A stateful firewall can inspect the contents of the packets as well. ... Stateful Packet Inspection ... VisNetic Firewall falls into a class of firewalls called Stateful ... Stateful inspection firewalls overcome the ...
      (comp.security.firewalls)