Text 12808, 50 rader
Skriven 2010-12-02 22:45:42 av Peter Knapper (3:772/1.0)
  Kommentar till text 12648 av Michiel van der Vlist (2:280/5555)
Ärende: Firewalls
=================
Hi Michiel,

 Sorry for the delayed reply, I have been a bit distracted at work....;-)


 MvdV> Yes, if the lock on the room is the only protection, 
 MvdV> then indeed all bets are off, once that is broken. 

However an external F/W need not be the only source of protection. I prefer to
segment my protection wherever possible, so the failure of one device never
leaves one completely open to abuse. Generaly my rotection is restricte to eh
best tool for the job, EG, I use the Routers protectipon for low level layer 2
issues, and the Firewall for Layer 3 and up. The high end layers are the only
ones that I use on the target machine IF I can manage things that way (this is
not always possible)...


 PK> I dont consider it a "problem" at all, its 
 PK> simply a situation that I
 PK> prefer to not leave in the Laps of the gods (EG MS), but prefer to
 PK> manage myself.

 MvdV> In how far do you manage it yourself? 

Most of my "protection" comes from the Firewall device itself, not the end
system...


 MvdV> Did you write your own friewall or do you trust the gods of Cisko 
 MvdV> et all?

Of course not, we use fully commercial products for Firewalls, and no, by far
the bulk of them are not Cisco but a rather well known commercial Firewall
Vendor. The Cisco Firewall (was PIX and is now their ASA range) is a very
application specific Firewall, while we Generaly use a lower level form of
Firewall that provides better control over things, but it also requires a
higher level of understanding of the implemenatation of them.

 MvdV> So what it boils down to is simple dislike of Microsoft.

Make that "A dislike of the methodology used my MS to implement their
facilities". To me, MS seems to work on the 80/20 rule, cover what 80% of the
people do well, and leave the other 20% to those that dabble around a bit...;-)
its that Dabbling and its lack of documentation that worrry me...

Cheers............pk.


--- Maximus/2 3.01
 * Origin: === Maxie BBS.  Ak, NZ +64 9 444-0989 === (3:772/1)