Re: [FW1] Checkpoint FW-1 vs. a Proxy Firewall. Which is more secure?

["Paul D. Robertson" <proberts@clark.net>]

On Mon, 31 May 1999 sirving@ca.ibm.com wrote:

> I don't think there are any transparent proxies out there yet; but one may argue
> that Checkpoints security servers are just that.

This is not accurate.  Indeed *most* popular proxy-based firewall vendors 
offer a transparent mode (and there were even patches for http-gw on 
Linux floating around at one point- in fact I seem to recall work on 
transparent proxies being moved into the Linux kernel about a year or so 
ago.)  Users of transparent solutions should check to see if their
users can be compromised by filling out the proxy section of their Web 
browsers to point to an external proxy though, that's sure to be 
exploited at some point.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
proberts@clark.net      which may have no basis whatsoever in fact."
                                                                     PSB#9280


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================