The people who have written this document, advise this architecture when
using a single firewall:
priv. network --- firewall ----- untrustw. host ----- internet
Here's an idea:
If this is the preferred architecture for your public servers you should lock
them down with a host based firewall like CyberwallPLUS-SV by Network-1
Security Solutions. Using a server based firewall you can harden the
vulnerable host systems without putting your internal network at risk.
Rob L.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]