At 10:08 AM 4/20/00 +0930, Ben Nagy wrote:
> >
> > On Wed, 19 Apr 2000, Rick Murphy wrote:
> >
> > > > > The only 2 firewalls that have passed NSA's security
> > tests are FW-1 and
> > > > PIX.
Please be careful about attributions. I didn't write that, and it's not
clear from the quoting bars who did.
I won't comment on the testing done against these firewalls but will say it
was pretty extensive. The labs do know what they're doing.
>Also note that the level of evaluation only allows either box to protect (at
>most) "sensitive but not classified" information.
That's par for the course. No MAC enforcement means no classified data.
Would you *really* use Firewall-1 on NT to connect your top secret network
to the Internet?
-Rick
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
