Hi Dan,
If you've been reading the list, you know the drill...
What's your threat model? How many sites? Is budget a factor? What
externally accessible services (if any) do you need to protect? Have you
written a security policy? And so on...
Generally, I approach security by looking for the vulnerability that sticks
out the most and then doing something about it. When that's done I look for
the next most likely threat, and so on. Eventually you get to the point
where the risks are business-acceptable versus loss. Don't forget dialin,
physical access, mobile laptops etc.
One company I worked for spent so much time looking for a fantastic firewall
that they forgot they were planning to implement NT+IIS with ASP as their
e-commerce solution...
--
Ben Nagy
Network Consultant, Volante IT
PGP Key ID: 0x1A86E304 Mobile: +61 414 411 520
> -----Original Message-----
> From: Dan Robb [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, 28 June 2000 6:38 AM
> To: [EMAIL PROTECTED]
> Subject: Watchguard vs. Netscreen
>
>
> Hello all,
>
> I have to recommend firewalls for my company to implement
> globally. I have been
> looking at the Netscreen-100 and also the WatchGuard Firebox
> II. I would like
> to hear about any experiences (good AND bad) that anyone has
> had. I would also
> like to hear about other products that anyone feels are far
> superior to either
> of those two products.
>
> Thank you very much. I appreciate any help that you can offer.
>
> Dan
>
> ---
> ------
> Dan Robb 200 W. Jackson Blvd Suite 2300
> Systems Administrator Chicago, IL 60606
> TradeLink L.L.C. Phone - 312.264.2000 ext.2030
> [EMAIL PROTECTED] Fax - 312.264.2001
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]