Try: http://www.checkpoint.com/products/downloads/Stateful_Inspection.pdf
It's (understandably) a biased opinion, but then again, they are generally recognized as the best firewall on the market.
I use information from this document to show the superiority of stateful inspection versus packet filters to my client. The next battle I usually have is that of using a hardened security platform to run it on as opposed to a generic Unix box. I use other resources for ammunition there.
Regards,
Scott A. Wozny
Enterasys, NYC
-----Original Message-----
From: iCefoX [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 23, 2000 4:09 PM
To: [EMAIL PROTECTED]
Subject: Re: Stateful Inspection vs Packet Filter
Hi Lister,
I am trying to do some research on the architectural difference of Stateful flow
inspection technology and plain packet filter that is readily find in
networkking device like router.
I would appreciate for any pointer in terms of reading. On the other hand I
guess it would be more easy to understand from an experienmental perspective. I
wonder if the is any security guru which could point me to the conduction of
some form of basic/simple penetration test so that I can get a better
appreciation of these two different technologies. I am assuming that some form
of penetration test can circumvent packet filter while not possible to stateful
inspection technology given their architectural differences.
Cheers!
iCefoX
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
