Re: [FW1] Checkpoint FW-1 vs. a Proxy Firewall. Which is more secure?

[Ronald_Beaulieu@lgs.ca]

For my own and the list's knowledge, Could you elaborate on how it is more
secure than a stateful inspection firewall.

Thanks,

Ron.






Rudolf Schreiner <ras@muc.de> on 05/31/99 12:05:32 PM

To:   sirving@ca.ibm.com
cc:   fw-1-mailinglist@lists.us.checkpoint.com (bcc: Ronald
      Beaulieu/Montréal/LGS/CA)
Subject:  Re: [FW1] Checkpoint FW-1 vs. a Proxy Firewall. Which is more
      secure?




On Mon, 31 May 1999 sirving@ca.ibm.com wrote:

> I don't think there are any transparent proxies out there yet;

There are!
The client tries to connect to the real server. The firewall intercepts
this connect and redirects it to the proxy. It's pretty simple, for
example my IIOP firewall uses such a transparent proxy. 'works fine and
is more secure than statefull filters.

Rudi



===========================================================================
=====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
===========================================================================
=====