>>>>> "jen" == jen <[EMAIL PROTECTED]> writes:
jen> Also, you should note that if you use unusual services, there may
jen> not be proxy developed for them. Last I checked, Raptor did
jen> proxies only -- no stateful inspection option. This means if you
jen> want to support a new protocol (for example, we were interested
jen> in ICA and RDP a while ago), then you might be SOL.
"Developing a new proxy" on the Raptor firewall is a matter of a few
mouse clicks and typing the name of the service. That does not give
you any inspection of the protocol contents, it will just pass the
traffic.
If you want to shoot yourself in the foot, you can even do plain
packet filtering on the Raptor firewall, but it is (fortunately) hard
to set up.
If you have an odd protocol and need to get it through with inspection
of contents, you have to either convince Axent to support it, or go
with Firewall-1 and program your own inspect rules. Either way is
not easy.
Best regards,
Benny Amorsen
Netvision Denmark
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
