Re: Firewall best practices
"Marcus J. Ranum" <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <[email protected]> |
Martin Barry wrote: > ...and every app that wants to work around a firewall just encrypts it's > traffic and runs the server on port 443. That's why firewalls need to go back to doing what they originally did, and parsing/analyzying the traffic that flows through them, rather than "stateful packet inspection" (which, as far as I can tell, means that there's a state-table entry saying "I saw SYN!") If the firewall doesn't understand the data it's passing, it's not a firewall, it's a hub. mjr. -- Marcus J. Ranum CSO, Tenable Network Security, Inc. http://www.tenablesecurity.com