RE: Next Microsoft operating system for firewalls?

2001-10-05 Thread Gary Jones
I would suggest a read of www.grc.com - XP or sans, as many security and TCP/IP Raw Socket information can be found there. __ Do You Yahoo!? NEW from Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.

Symantec FW

2001-10-05 Thread Achim Dreyer
hallo, Any opinions to Symantec Enterprise Firewall Power VPN ? I know that this comes from the previous raptor firewall, but what are the differences? Any pros/cons ? Regards, Achim Dreyer --- A. Dreyer, UNIX System

Re: Symantec FW

2001-10-05 Thread Matthew Shine
Achim Dreyer wrote: hallo, Any opinions to Symantec Enterprise Firewall Power VPN ? I know that this comes from the previous raptor firewall, but what are the differences? Any pros/cons ? Personally I think it is crap. We are trying to phase it out due to VPN issues. We are running

cisco 3k vpn + certs

2001-10-05 Thread bob bobing
Can anyone point me to some reading matrial on managing cert with the cisco's vpn 3000? I don't know if i want to do this or not, but even if i did i don't know pro/cons or how to handle it for a large user base (say 1000 users). Btw i would realy like to go open src, but that isn't a must.

check for Stateful Inspection

2001-10-05 Thread Jason Yuan
Check Point has patented Stateful Inspection technology way back in 1993. Their products have matured over the years. They undoubtly have the largest market share. During the last few years, there are plenty of vendors that step up to the plate selling firewalls and VPNs. Almost all of them claim

FreeBSD firewall - how to redirect??

2001-10-05 Thread [EMAIL PROTECTED]
aybe just my pain, but I am perusing everywhere (http://groups.google.com), also faq's, tutorials and so on, but I am not able to get a single reply (maybe I am too newbie even for the man pages - I cannot apply it to my question): I need to mount a server in a (sort of) dmz, serving

RE: FreeBSD firewall - how to redirect??

2001-10-05 Thread John Allhiser
This may help: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/natd.html John Allhiser MCSE CCNA Network Engineer Business Men's Assurance -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, October 05, 2001 12:07 PM To: [EMAIL PROTECTED]

FW: Which do you prefer, Symantec or Checkpoint or other?

2001-10-05 Thread Laura Folden
We are intending to set up remote file access with login scripts through an extranet client for Netware 5.0 servers which will run through a new firewall. My experience with firewalls is limited, and everyone seems to have a different opinion. We have had Citrix Metaframe, Symantec,

Re: FreeBSD firewall - how to redirect??

2001-10-05 Thread Bruce Bauer
My preference would be to use OpenBSD for this sort of functionality. But I understand that you can put Darren Reed's IPF on FreeBSD and this will do what you want. I would get a public IP address for the server and do a static mapping to 192.168.2.0 on the firewall or the internet router.

Re: FreeBSD firewall - how to redirect??

2001-10-05 Thread bob bobing
well you have many options with freebsd. 1. IPNAT using IPFILTER 2. NATD using IPFW 3. FTWK (/usr/ports/security/fwtk or /usr/ports/net/fwtk) This is basiclly a set of proxies. Lets go with ipfilter. First load the ipfilter module or build a kernel with it installed. kldload ipl will install

RE: Which do you prefer, Symantec or Checkpoint or other?

2001-10-05 Thread Dan McGinn-Combs
I went through an evaluation period during 1999 as we prepared for a couple of events: 1) Millenium change 2) Migration from Linux/TIS toolkit to a corporate standard We evaluated Raptor, Technologic (now E-Soft), Checkpoint, PIX and a few other systems. In the end, since we are a global

Re: check for Stateful Inspection

2001-10-05 Thread ktimm
Use 2 boxes one outside firewall and the other inside. Connect from the inside box to the outside via web port 80. Your connection from inside should be on some high port above 1024. Run tcpdump on the host inside the firewall and determine which ports you are really using and the seq and ack

RE: Next Microsoft operating system for firewalls?

2001-10-05 Thread Tony Carter
If this were to happen, it seems like Microsoft Windows Embedded would be an option. Tony -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Frank Sommer Sent: Thursday, October 04, 2001 6:05 AM To: Firewall-Mailing-Liste Subject: Next Microsoft operating

Re: check for Stateful Inspection

2001-10-05 Thread Jason Yuan
Sounds like a easy enough procedure for HTTP. Where can I find HPING for packet generation? I will get on with it next week! Jason [EMAIL PROTECTED] wrote: Use 2 boxes one outside firewall and the other inside. Connect from theinside box to the outside via web port 80. Your connection from

Re: FW: Which do you prefer, Symantec or Checkpoint or other?

2001-10-05 Thread Michael Janke
Laura Folden wrote: We are intending to set up remote file access with login scripts through an extranet client for Netware 5.0 servers which will run through a new firewall. My experience with firewalls is limited, and everyone seems to have a different opinion. We have had Citrix

Re: check for Stateful Inspection

2001-10-05 Thread Bernd Eckenfels
On Fri, Oct 05, 2001 at 09:52:40AM -0700, Jason Yuan wrote: We get calls from these vendors / or from our customers all the time. However, I have doubts about some of the vendor's security implementation. How would I know if it were just packet filtering technology? (Some of them were

Re: Next Microsoft operating system for firewalls?

2001-10-05 Thread Bernd Eckenfels
On Fri, Oct 05, 2001 at 03:56:04PM -0400, Tony Carter wrote: If this were to happen, it seems like Microsoft Windows Embedded would be an option. There is a Windows NT Embedded... I guess black-box vendors use that, already. Greetings Bernd ___