Re: [FW1] Newbie Quetion

[Frank Keeney <frank@pasadena.net>]

On Wed, 17 Mar 1999, cbrenton wrote:

> > It appears now that the "standard" is to hook up the
> > firewall directory to the ISP provided router and move the dmz onto the now
> > unused service segment.
> 
> This does not make much sense to me. I for one still implement packet
> filtering on the router when ever I install a firewall.

I could not agree more on this subject. I never install any security
anywhere without having at least two devices to provide protection.
Depending on the company I may use three. A filtering router and two
different brands of firewalls. At least this is what I do at banks. If you
have a failure or vulnerability on one then you have another device.





================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================