Date: Tue, 26 May 1998 14:52:53 -0500 (CDT) From: Josh <josh@frantastic.com> To: isp@FreeBSD.ORG Subject: Re: Firewall software Message-ID: <Pine.BSF.3.96.980526143749.5299B-100000@elvis.mu.org> In-Reply-To: <356AF394.C1AF1DC3@createtech.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 26 May 1998, Kim Shrier wrote: > Firewall-1 only runs on NT > and uses "statefull inspection" as its method of providing protection. > This is considered to be less secure than proxies. Since maintaining > anything on NT is a pain, I usually avoid NT if at all possible. Actually, firewall-1 will run on NT, HP-UX, AIX, Solaris and SunOS. The firewall client that is used to maintain firewall-1 can be run from windows95/nt or an a motif application under xwindows, regardless of which type of platform the engine runs on. It is true that stateful inspection does not offer the same protection that a proxing system might for a particular protocol, but it does provide protection independent of application level protocol (ie it's modular). It's also very common to combine firewall-1 with some type of a proxy server to provide greater protection. josh franta mailto:josh@frantastic.com http://frantastic.com/josh/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980526143749.5299B-100000>