Re: Proper uses for firewalls

From: Eirik Seim (eirik@mi.uib.no)
Date: 09/01/02 

From: eirik@mi.uib.no (Eirik Seim)
Date: 1 Sep 2002 15:18:42 GMT

On Sun, 01 Sep 2002 12:35:42 GMT, Bill F. wrote:
> There are different types of firewalls, ie., static packet filtering,
> dynamic packet filtering, proxy, circuit, kernel. How does one go
> about appropriately deciding which type of firewall will fit a
> person's specific needs?

You evaluate the person's needs and compare them with what the
different firewalls provide.

"Needs" will of cause include things required by law, for instance
when dealing with sensitive personal information, or with worries
like protection of intellectual property, the needs to do content
specific scan for email, http, ftp, etc.. People actually go to
school for quite many years learning this stuff, and still they
find no simple answer.

> Are there certain features of different
> types of firewalls which will suite specific needs?

Yes.

> How does one go about convincing a company that their cisco IOS packet
> filters are not a firewall suitable for their needs?

Are you certain that their Cisco IOS packet filters are not suitable?
If you are, it wouldnt be much harder than explaining in your own words
why.

I see no obvious reason why Cisco's access-lists wouldnt be enough for
some companies.

- Eirik 

-- 
New and exciting signature!

Relevant Pages

  • Re: hardware firewall
    ... the block inbound as part of the normal NAT function. ... Firewalls are actually firewalls and ... a useful overview of different firewalls techniques: ... Packet filtering is fairly effective and transparent, ...
    (comp.security.firewalls)
  • Re: Proper uses for firewalls
    ... You need a big router to do proper packet filtering on an entire network ... intrusion detection algorithms that are in "Firewalls" as opposed to filters ...
    (comp.security.firewalls)
  • I cannot find why one of my servers is blocked connecting another machine
    ... One of my servers is a Linux machine. ... timeout connecting to another machine B. Other servers and even my ... B has no firewalls or packet filtering facilities. ...
    (comp.os.linux.networking)
  • Re: How good are personal hardware NAT firewalls?
    ... > personal firewalls like the LinkSys BEFSX41 are: ... no inbound ports are open (i.e. ... > I wanted to get some details on the final item (does packet filtering ... about what other firewalls on the internet that hacker may have been ...
    (microsoft.public.security)
  • Re: Proper uses for firewalls
    ... > There are different types of firewalls, ie., static packet filtering, ... > dynamic packet filtering, proxy, circuit, kernel. ... With all due respect Bill, if you have to ask this you should not be in a ... My apologies if your not actually in a consulting/sales position but if you ...
    (comp.security.firewalls)