[FW1] Checkpoint FW-1 vs. Proxy Firewalls

[karimi@ca.ibm.com]

Hello

Could someone please tell me if proxy-type firewalls inspect the data within the
frame for
actual hacking/cracking or offensive commands vs. a stateful-inspection firewall
which i am led
to believe doesn't examine the actual payload.

i have heard that proxy-type firewalls (ex: IBM's E-Firewall or Secure-IT
Blackhole)  examine the actual
contents of the data at Layer 7 (application layer) - hence, if someone embedded
some offensive
commands, it would be caught.

Could someone please elaborate on whether a filtering firewall like Checkpoint
can do
this, or only with the addition of the "plug-in" content-security servers (SMTP,
etc).

Thanks




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================