Re: searching for hardware firewall with web history

From: Lars M. Hansen (badnews_at_hansenonline.net)
Date: 11/09/03 

Date: Sun, 09 Nov 2003 00:03:18 GMT

On Sat, 08 Nov 2003 21:04:18 +0100, Wolfgang Kueter spoketh

>Lars M. Hansen wrote:
>
>> Checkpoint is software. The Nokia box is simply a box running a modified
>> version of FreeBSD. However, it is marketed as an appliance...
>
>PIX *is* software! BTW: Have you ever opened one? You'll find normal PC
>hardware in it and the OS is some sort of BSD derivate.
>
>> I'm not familiar with Astaro. A quick look at their website would
>> indicate that Astaro is a software firewall. From a quick look at a few
>> of the appliances, it looks like they are running some sort of linux
>> kernel (which, btw, are getting more and more popular in appliances).
>
>BTW: Watchguard is very much the same as Checkpoint or Astaro. Escpicially
>Watchguard comes with serveral built in Proxy servers. It is technical
>nonsense to call such devices 'hardware firewalls'. BTW: Even the most
>simple packet filter uses software.
>
>> I've never said that "hardware firewall" is a good term,
>
>So why not call it what ist is? Wrong, marketing speech and technical
>nonsense.
>
>> but I've accepted the fact that the term has become synonymous with
>> firewall appliance.
>
>I have not. Why not call a firewall appliance what it is? Firewall
>appliance!
>
>> People use the term, and I answer their questions rather than
>> insult them for the use of the term.
>
>I didn't do that.
>
>> It's really your decision if you want to continue the path you are on,
>> or contribute positively to the group by answering questions without
>> insulting the OPs intelligence.
>
>I contributed something technically correct in this thread, but you snipped
>it and instead tried to convince me to use an semantically inaccurate term.
>I simply don't do that and no sales droid in this universe can force me to
>do it.
>

No, you are arguing semantics. It is obvious to most people who are
network professionals that all hardware is running some software to
actually perform certain tasks. Even an elevator wouldn't be an elevator
without the software to run it.

However, the fact of the matter is, that firewall appliances have become
known as "hardware firewalls", regardless of the fact that you don't
like it. Although I try not to use the term myself, I do answer
questions regarding "hardware firewalls" rather than insulting the
person asking the question by providing a link to a hardware store
selling wire cutters...

The term "hackers" are also misused, and has now become synonymous with
(and to most extent replaced) the term "cracker". I used to be a hacker,
but was never a cracker...

The term "DMZ" is also a misnomer. If by "militarized" one can assume
protected, then "demilitarized" should be considered unprotected, which
in turn would mean outside a firewall. Instead, "DMZ" are used to
describe a secondary network, protected by a firewall but separate from
the LAN.

There's plenty of semantic discussion that can be had. I'm just not
particularly interested in participating in it.

Lars M. Hansen
www.hansenonline.net

Relevant Pages

  • Re: How to set up a hardware firewall
    ... I do not think there is such a thing as a hardware FW. ... > A firewall is a computer program, which takes as input the incoming ... appliance, which is not considered a stand-alone computer as it only ... If I were to take a PC, install NIX on it, then install any version of ...
    (comp.security.firewalls)
  • Re: Hardware firewall - recommendation / advice
    ... firewall but without any OS user orientated or not. ... >referred to as a hardware firewall. ... and require a PC to install the software onto the ... Yup, an appliance. ...
    (comp.security.firewalls)
  • Re: ipfilter vs. firewall appliance
    ... Well, if you can, crack open a "hardware" firewall like a Cisco PIX. ... or use something that does a lot of crypto calcs. ... FreeBSD or off the shelf appliance) are a critical component in the ...
    (freebsd-questions)
  • Re: Hardware Firewall??
    ... firewall features - notice the difference? ... so both are hardware devices. ... both - a firewall appliance is a device specifically ... chance for error, less chance for exploits, less chance for something to ...
    (comp.security.firewalls)
  • Re: searching for hardware firewall with web history
    ... it is marketed as an appliance... ... BTW: ... > indicate that Astaro is a software firewall. ... Wrong, marketing speech and technical ...
    (comp.security.firewalls)