RE: [FW1] Languard

["East, Bill" <eastb@PFFCU.org>]

From their home page (http://www.firewall-security.com/):

--- begin included text ---
LANguard is installed on any machine on the main network, so that it can see
the router/proxy server. It then monitors all TCP/IP traffic entering and
leaving the company. This eliminates the need for complex installation
procedures, such as setting up  a demilitarized zone - a procedure requiring
know-how that is both expensive and hard to come by.
--- end included text ---

Firewall Barbie: "DMZs are hard!"

I'll freely admit to little knowledge of this particular product. But it
seems to me that there is one particularly weak spot: If the machine that it
is on goes down or is compromised, your network is wide open. I note that
you can have another copy running on another machine, but I still wouldn't
trust it. What if the program just isn't watching when a particular packet
comes through?

The site also states that the product can be used in conjunction with a FW-1
install. That's probably a much better use of the product.


Cheers 

p.s. - I find this neither highly important nor confidential.

> -----Original Message-----
> From: Raymond Banfield [mailto:BanfieldR@shopfast.com.au]
> Sent: Wednesday, October 06, 1999 2:05 AM
> To: 'firewall mailing list'
> Subject: [FW1] Languard
> Importance: High
> Sensitivity: Confidential
> 
> 
> 
> I have used firewall before but I have been asked to look at a product
> called LANGuard
> 
> any comments/experience or pitfalls to watch out for.
> 
> any comments on if this is an effective tool to use instead 
> of Checkpoint
> FW1.
> 
> Arguments on both sides of equation welcome.
> 
> Thanks in advance
> 
> Raymond
> ISO
> 
> 
> =============================================================


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================