[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ipsec vs. firewalls
At 10:47 AM 5/7/98 +0100, Damien Wetzel wrote:
>im working for a french provider as a presale engineer,
>i'm thinking as steve that firewall are not going to last long
>but most of our client are asking for them,
>
>So could you tell me why you are saying that :
>>
>>(rising to the bait) Firewalls are dead. Get used to it. :-)
>>
Firewalls will serve a much different purpose in the brave new world of
IPsec host deployment (coming to your company 2 full years before IPv6
deployment).
Ahem.
In the new regime, the Firewall will:
control policy for unprotected outbound connections (not right to waste
company time surfing through disney.com)
Manage all of that unsecured inbound (and outbound) mail
Block extraneous packets attacking all miscellenous internal devices like
hubs, terminal servers and the like that may never get IPsec (or not until
they get upgraded to IPv6)
I think that there might be a few more items to add to this list......
Robert Moskowitz
ICSA
Security Interest EMail: rgm-sec@htt-consult.com
References: