Re: [fw-wiz] The Death Of A Firewall
From: Julian M D (julianmd_at_gmail.com)
To: firstname.lastname@example.org Date: Wed, 26 Oct 2005 14:09:19 -0400
So basically he's saying that he's safer now because of the "DMZ" created by
the L3 Switches???? with 3 layers of application servers running in VIRTUAL
I'd say the safest method is the one that best suits your needs, not only
from the security point of view, but TCO, ROI, manageability...etc.
What I agree on is the fact that, security must be covered from INSIDE-OUT.
Secure the LAN first
On 10/17/05, Pedski <email@example.com> wrote:
> James Paterson wrote:
> >Be interesting to get the communities take on this article.
> >firewall-wizards mailing list
> This is a model that has holes...
> router acl are not statefull.
> they seem to have some secutiy by means of DMZ
> the managemnt overhead of this is high..sometimes is not that easy
> deploying patches if the vulnerabilty came in the night...meaning if you
> are blocking everything with a firewall you bought yourself some
> time....in this case they are open ...the term raise their immunity to
> exists in hashers condition sounds really nice...but often attacks or
> worms come like a thief in the night......
> there is something flawed with this architecture.
> firewall-wizards mailing list
firewall-wizards mailing list