[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ipsec through firewalls (was re:INITIAL-CONTACT issues)
I will observe that for many companies, the group that wishes to run the
firewalls is typically anally challenged, and typically the rest of the
organization typically doesn't care about security except to resent the
group that runs the firewall.
In that situation, it may very well make sense for the firewall and the
ipsec gateway to be (logically, if not physically) the same service, and
run by the firewall group. Obviously, each company's politics and
technical issues will be different, but my guess would be that for many
such companies, the requirement to poke holes in the firewall may not be
an issue since the folks running the firewall will be the one installing
the IPSEC gateway ---- possibly by replacing their firewall with one of
those products which integrate the firewall and ipsec gatewaying
functionality into a single box.
- Ted
References: