firewall-wizards Digest, Vol 19, Issue 19

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."

Today's Topics:

1. Re: Firewalls that generate new packets.. (Paul Melson)
2. Re: Firewalls that generate new packets.. (Paul D. Robertson)

----------------------------------------------------------------------

Message: 1
Date: Sat, 24 Nov 2007 14:21:01 -0500
From: "Paul Melson" <pmelson@gmail.com>
Subject: Re: [fw-wiz] Firewalls that generate new packets..
To: "Firewall Wizards Security Mailing List"
<firewall-wizards@listserv.icsalabs.com>
Message-ID:
<40ecb01f0711241121x91572b4kc6cf3f300896a600@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

> But if my experience with Internet-enabled software vendors
> is anywhere near common, nobody's enablign the proxies.

Some are turned on by default, and some common features (like content
filtering) require the proxies in order to work.

But there are plenty of guides and knowledge base articles that
recommend disabling them to fix problems or boost performance. And
that's the core of the old stateful vs proxy debate from 10 years ago.
Now you can have the debate with yourself over your one firewall
platform. :-)

PaulM

------------------------------

Message: 2
Date: Sun, 25 Nov 2007 10:11:23 -0500 (EST)
From: "Paul D. Robertson" <paul@compuwar.net>
Subject: Re: [fw-wiz] Firewalls that generate new packets..
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID: <Pine.LNX.4.44.0711251007220.16056-100000@bat.clueby4.org>
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Mon, 19 Nov 2007, ArkanoiD wrote:

> Which always made me wonder: Pix have almost nothing common with IOS
> routers except Cisco label on it. For ASA, things chaged a bit, but the
> "firewall" part of the device is still the same.

Sure, it has plenty of things in common:

It's a network device, just like the routers are.
It's sold to the same people.
It's sold by the same people.

My pictures have nothing to do with IT or INFOSEC, but I make most of my
sales to the same customers. Most of that is the sales opportunity- the
last two on my list- but I'd like to think at least part of it is that
they know the level of quality they'll get from me in anything I sell
them.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
paul@compuwar.net which may have no basis whatsoever in fact."

http://www.fluiditgroup.com/blog/pdr/

Art: http://PaulDRobertson.imagekind.com/

------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

End of firewall-wizards Digest, Vol 19, Issue 19
************************************************