Re: About utility of a firewall with win2000 server

From: S. Pidgorny [MVP] (slavickp@yahoo.com)
Date: 09/04/02 

From: "S. Pidgorny [MVP]" <slavickp@yahoo.com>
Date: Wed, 4 Sep 2002 19:32:33 +1000

Aye, everything is subject to risk assessment etc. - but installing a
firewall on a separate box to protect TCP/IP stack on the bastion host is
overkill in most cases. 

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-
<jcochran at naplesgov dot com (Jeff Cochran)> wrote in message
news:3d7df39d.21979605@news.supernews.com...
>
> There are a lot of attcaks a bastion host has to withstand, using
> server resources, that a firewall would protect against.  SYN floods,
> DOS attacks and so on can bring a bastion host down where a good
> firewall will stand.
>
> Bastion hosts are putting all your eggs in one basket.  Once they're
> in, they're in.
>
> Jeff

Relevant Pages