firewall-wizards Digest, Vol 66, Issue 2

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."


Today's Topics:

1. Re: DISA eliminating firewalls (?rp?d Magos?nyi)
2. Re: DISA eliminating firewalls (Andr? Lima)


----------------------------------------------------------------------

Message: 1
Date: Thu, 04 Jul 2013 17:37:36 +0200
From: ?rp?d Magos?nyi <mag@magwas.rulez.org>
Subject: Re: [fw-wiz] DISA eliminating firewalls
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID: <51D596C0.9050203@magwas.rulez.org>
Content-Type: text/plain; charset=ISO-8859-1

On 07/04/2013 04:32 PM, Paul D. Robertson wrote:
> Http://www.afcea.org/content/?q=node/11248
>
It is a bold move at a minimum. Unless I wasn't listening, and all the
DoD systems are at least LSPP compliant now.
Any information of that shiny new architecture?
Anonymous will _love_ it.



------------------------------

Message: 2
Date: Thu, 04 Jul 2013 19:27:00 +0100
From: Andr? Lima <andreflima@gmail.com>
Subject: Re: [fw-wiz] DISA eliminating firewalls
To: firewall-wizards@listserv.icsalabs.com
Message-ID: <51D5BE74.6060307@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Firewalls will never and should never disappear.
The reason is that multi-layer security systems are the best one can
apply for any network. And by definition it means that one layer (e.g.
firewall) will obviously not be enough, but nevertheless it is an
essential part or the security system. And the reason I believe it won't
disappear is that it gives us all some assurance. Just as the door in my
house. If a great professional burgler wants to get something from our
homes, the door will obviously not stop him. But that doesn't mean I'm
willing to give up my door and just be in an open door home, because it
does help in some situations (tipical strangers, or unwanted kids). I
don't want to be inside and be worried that a drifting stranger might
get inside and sleep in my bed while I'm away just because there was
nothing to stop him.
But if you're just implying that such system can be implemented, indeed
that's possible. But that would be an end-to-end security system which
is a nightmare to maintain. A firewall is centralized and even though we
all know it's not enough to mitigate all attacks, it does give me some
basic assurances so I don't have to be (extremely?) paranoid inside my
own network.

Best regards,
Andr? Lima
http://www.andr3l1ma.net/


Em 04/07/2013 16:37, ?rp?d Magos?nyi escreveu:
> On 07/04/2013 04:32 PM, Paul D. Robertson wrote:
>> Http://www.afcea.org/content/?q=node/11248
>>
> It is a bold move at a minimum. Unless I wasn't listening, and all the
> DoD systems are at least LSPP compliant now.
> Any information of that shiny new architecture?
> Anonymous will _love_ it.
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@listserv.icsalabs.com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

--
Andr? Lima



------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


End of firewall-wizards Digest, Vol 66, Issue 2
***********************************************