-Define the distinguishing characteristics of Stateful packet inspection (STPI) versus plain packet filtering (PPFL). That is, what can STPI do that PPFL cannot? Is that better? Do the benefits justify costs?
--Construct test packets and generate traffic that an STPI product could easily catch but a PPFL would not. --For each product claiming to be STPI compliant obtain a test sample and conduct your tests. --Make your choices from the products that pass your tests to your satisfaction, bearing in mind costs, benefits, and compliance with your business objectives. Lori ++++++++++++++++++++++++++++++++++++++++++++ > Date: Fri, 5 Oct 2001 09:52:40 -0700 (PDT) > From: Jason Yuan <[EMAIL PROTECTED]> > Subject: check for "Stateful Inspection" > To: [EMAIL PROTECTED] > > --0-1486457828-1002300760=:38623 > Content-Type: text/plain; charset=us-ascii > > > Check Point has patented Stateful Inspection > technology way back in 1993. Their products have > matured over the years. They undoubtly have the > largest market share. > > During the last few years, there are plenty of > vendors that step up to the plate selling firewalls > and VPNs. Almost all of them claim that they have > similar technology toward Stateful Inspection. > > We get calls from these vendors / or from our > customers all the time. However, I have doubts > about some of the vendor's security implementation. > How would I know if it were just packet filtering > technology? (Some of them were selling hubs last > year!). Yet I do NOT have a good way to evaulate > the truthfulness about stateful inspection. > > Any suggestions? > > Jason > > > Jason Yuan > Consultant > Niles Associates > Tel: 510-385-3988 > Fax: 815-327-6544 > __________________________________________________ Do You Yahoo!? NEW from Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month. http://geocities.yahoo.com/ps/info1 _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
