when gauntlet came out with the 'Adaptive Proxy' I was evaluating
firewalls and looked into it a bit. What it appears that they are doing is
useing a proxy to handle the connection setup but then handled the rest of
the packets with packet filtering for speed (bypassing the proxies). I
haven't looked at it recently so they may have changed.

Raptor has been sold to symantec. They have two different sets of
firewalls. Their low end appliance firewalls are packet filters. In
addition they have the Symantec Enterprise Firewall (SEF, Raptor by a new
name) that is available in both software (NT and Solaris) and appliance
(on Linux) versions. SEF is a proxy firewall, but it does also have packet
filtering that can be used (both as additional protection and to bypass
the proxies)

David Lang


On Tue, 16 Apr 2002, Clifford Thurber wrote:

> Date: Tue, 16 Apr 2002 12:13:35 -0400
> From: Clifford Thurber <[EMAIL PROTECTED]>
> To: Noonan Wesley <[EMAIL PROTECTED]>,
>      'Rick Murphy' <[EMAIL PROTECTED]>,
>      "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: RE: Replacing my old PIX Classic
>
> Gauntlet is doing Adaptive Proxy so they are actually both a proxy and a
> stateful packet filter.
>
>
> At 10:51 AM 4/16/2002 -0500, Noonan, Wesley wrote:
> >Who is still making a proxy firewall then (not hybrid)? I am relatively sure
> >that ISA is. Sounds like the PIX are kind of sort of a hybrid. Is Gauntlet
> >still being made? What about Raptor? I seem to recall them being a proxy
> >too.
> >
> >TIA
> >
> >Wes Noonan, MCSE/MCT/CCNA/CCDA/NNCSS
> >Senior QA Rep.
> >BMC Software, Inc.
> >(713) 918-2412
> >[EMAIL PROTECTED]
> >http://www.bmc.com
> >
> >
> > > -----Original Message-----
> > > From: Rick Murphy [mailto:[EMAIL PROTECTED]]
> > > Sent: Tuesday, April 16, 2002 10:42
> > > To: '[EMAIL PROTECTED]'
> > > Subject: RE: Replacing my old PIX Classic
> > >
> > > At 09:55 AM 4/16/2002 -0500, Ron DuFresne wrote:
> > >
> > > >Isn't fw1 really a stateful packet filtering solution as apposed to a
> > > >proxy solution like the old gauntlet?
> > > >
> > > >Thanks,
> > > >
> > > >Ron DuFresne
> > >
> > > Gauntlet uses a packet filter at the core. That's how transparency works.
> > > Also, in current versions, how dynamic proxies work - by adjusting packet
> > > filter rules.
> > >
> > > Firewall-1 uses several proxies (SMTP, HTTP, etc.). They just call them
> > > "security servers".
> > >
> > > Now, you're right that Gauntlet is primarily a proxy firewall and
> > > Firewall-1 is primarily a stateful packet filtering firewall. Both
> > > products
> > > are hybrids.
> > >          -Rick
> > >
> > >
> > >
> > > _______________________________________________
> > > Firewalls mailing list
> > > [EMAIL PROTECTED]
> > > http://lists.gnac.net/mailman/listinfo/firewalls
> >_______________________________________________
> >Firewalls mailing list
> >[EMAIL PROTECTED]
> >http://lists.gnac.net/mailman/listinfo/firewalls
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
>
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to