On Thu, 14 Jan 1999 12:10:07 -0500
Frederick M Avolio <[EMAIL PROTECTED]> scribbled:
Its my observation that more and more protocols are being screened and
analysed as they pass through the firewall. This is a necessary evil as
the content/payload is now under close scrutiny for a variety of reasons.
Yes there is a large penalty in terms of computational processing but is
rapidly becoming a requirement.
One solution that appeals to me in terms of being able to process and
analyse the contents of your smtp/http/ftp etc while looking for virii,
active-x, java, sensitive data or whatever is to steal spare cpu cycles
of other machines in your network, run the filtering software in
parallel... any vendors shipping something like this yet?
I predict that this will eventually become common place, using spare cpu-
cycles, as a single machine just wont scale or be able to handle real
time requirements... so make sure you are deploying linux/freebsd/*nix
which will lend itself to this task in the future with low tco :)
/Norman
| available understand MIME, UUENCODE, etc. The more processing the
| slower
| the email gets out, of course. No products I know of read bitmap
| images for
| things that look like to the human eye like letters. I cannot imagine
| the
| compute overhead. The latency on outgoing email will drive people
| who
| really want to steal info and email it over the Internet (who else
| would be
| taking the time to do screen dumps of text to hide it) to just carry
| it out
| under their shirts. There's a product idea... make the Internet
| connection
| so slow that it is easy to sneak information out another way! No,
| we're
| still left with the people who send secrets out by accident.
|
| Fred
|
--
--------------------------------------------------------------
Paladin Corporation Pty Ltd. ACN 081 191 611
N�rman W�dders NW296-AU
Ph: +612 9835-4782 Fax: +612 9864-0487
Anti-Spam links at: http://www.paladincorp.com.au/spam.html
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
