RE: Firewall configuration statistics

From: John Floyd (john-floyd_at_austin.rr.com)
Date: 06/09/03

  • Next message: Vic Parat (NSS): "Re: URL Scan - allowing asp scripts"
    To: <security@rexwire.com>, <justinpryzby@users.sourceforge.net>
    Date: Mon, 9 Jun 2003 11:48:47 -0500
    
    

    www.securitystats.com

    -----Original Message-----
    From: security@rexwire.com [mailto:security@rexwire.com]
    Sent: Saturday, June 07, 2003 6:16 PM
    To: justinpryzby@users.sourceforge.net
    Cc: security-basics@securityfocus.com
    Subject: RE: Firewall configuration statistics

    That makes absolutely no sense. Plus I am not looking for a
    philosophical answer. I was looking statistics for marketing. Does
    anyone know of a good reference site for firewall and other security
    statistics.

    SKP

    -----Original Message-----
    From: Justin Pryzby [mailto:justinpryzby@users.sourceforge.net]
    Sent: Friday, June 06, 2003 6:18 PM
    To: security@rexwire.com
    Cc: security-basics@securityfocus.com
    Subject: Re: Firewall configuration statistics

    Security,

    100% of firewalls are misconfigured. I guarantee that no firewall
    administrator has considered all of the posibilities that are out there.
    Moreover, there are guaranteed bugs in the firewalling software itself.

    No firewalls are misconfigured. Computers do what they are told, and
    the occasion cosmic ray bitflip is insignificant compared to human
    error. FW admins who use broken software or write bad FW policies
    deserve to suffer the consequences.

    Take your pick. As a user, I think all firewalls suck because at best
    they are another layer for things to get f()'d up, and at worst they
    prevent me from doing stuff. As an admin, I know of no more problems in
    my current firewall configuration (-j DENY), but let me check.

    Unless you elaborate on whichever number you quote, it is meaningless.
    Anyone who has ever deal with a firewall will know that. You will,
    however, impress 99% of everone with a cool word like ''firewall''.

    Justin

    On Sat, Jun 07, 2003 at 12:42:26AM +0000, security@rexwire.com wrote:
    >
    > I remember once reading that X amount of firewall's are misconfigured.
    Does
    > anyone know where I can get this statistic from? We are making some
    > new marketing material and I would like to include this stat in it. A
    > quotable source would be great.
    >
    > Thanks
    >
    > SKP
    >
    >
    ------------------------------------------------------------------------

    ---
    >
    ------------------------------------------------------------------------
    ----
    > 
    ------------------------------------------------------------------------
    ---
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
    analysts! The Gartner Group just put Neoteris in the top of its Magic
    Quadrant, while InStat has confirmed Neoteris as the leader in
    marketshare.
         
    Find out why, and see how you can get plug-n-play secure remote access
    in about an hour, with no client, server changes, or ongoing
    maintenance.
              
    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ------------------------------------------------------------------------
    ----
    ---------------------------------------------------------------------------
    Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
    The Gartner Group just put Neoteris in the top of its Magic Quadrant,
    while InStat has confirmed Neoteris as the leader in marketshare.
         
    Find out why, and see how you can get plug-n-play secure remote access in
    about an hour, with no client, server changes, or ongoing maintenance.
              
    Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
    ----------------------------------------------------------------------------
    

  • Next message: Vic Parat (NSS): "Re: URL Scan - allowing asp scripts"

    Relevant Pages

    • RE: Firewall configuration statistics
      ... My question was clearly a marketing question regarding industry statistics. ... Subject: Firewall configuration statistics ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
      (Security-Basics)
    • RE: Firewall configuration statistics
      ... statistics for my marketing material and not a arbitrary number to feed to ... Some of the statistics I have come across are stated below; ... Subject: Firewall configuration statistics ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
      (Security-Basics)
    • WG: Firewall configuration statistics
      ... Betreff: AW: Firewall configuration statistics ... We were saying there might be more effective marketing strategies ... than statistics which cannot be proven one way or another. ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
      (Security-Basics)
    • RE: Firewall configuration statistics
      ... Subject: Firewall configuration statistics ... The Gartner Group just put Neoteris in the top of its Magic Quadrant, ... while InStat has confirmed Neoteris as the leader in marketshare. ...
      (Security-Basics)
    • RE: Firewall configuration statistics
      ... Subject: Firewall configuration statistics ... I was looking statistics for marketing. ... reference site for firewall and other security statistics. ... The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
      (Security-Basics)