Re: Quiet
Timothy Shea <[email protected]> Mon, 23 Jun 2014 18:37:43 -0700
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <CAHxuY53JdvHGATT-=rS616w5MVqk=ftpLQYOk8oekMXpOo91zQ@mail.gmail.com> |
--===============1302237623== Content-Type: multipart/alternative; boundary=001a11c2f43488420404fc8b0116 --001a11c2f43488420404fc8b0116 Content-Type: text/plain; charset=UTF-8 > Thoughts on IPv6? Meh. Is this the year of IPv6? Or was that last year? Or next year? I'm sure it will come up in some meeting and we will table it to next year. But I'm sure someone here will spend a lot of text here to inform that I must absolutely convert now even though it provides no value to our business nor are we seeing any demand (even in our asian markets). > Thoughts on "Cloud Firewalls?" Meh. For office perimeter protection - most vendors that offer "firewall as a service" fail at the basics. Like keeping their service up. Or advance notice of changes. Or even returning phone calls. As for our cloud hosting properties we are moving network ACL's to the individual hosts (we are moving to this model at our physical properties as well). I have noticed with some amusement vendors trying to dump all their bloated code unto an image to deliver a 'cloud firewall' without any optimization or enhancements to take advantage of cloud features (*cough* checkpoint *cough*). > Thoughts on Web Application Firewalls? Wouldn't implement a web app without one. Its vital to rapidly react to application issues, implement rate limiting, enforce white/black listing, keep software engineering honest, and provide visibility into the web stack. I'm going to grab some popcorn and see where this discussion goes. :) On Mon, Jun 23, 2014 at 10:16 AM, Paul D. Robertson <[email protected]> wrote: > It's quiet here- I'd like to stir up some discussion... > > Thoughts on IPv6? > Thoughts on "Cloud Firewalls?" > Thoughts on Web Application Firewalls? > > Paul > _______________________________________________ > firewall-wizards mailing list > [email protected] > https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards > -- Tim Shea, CISSP, ISSAP, CISM 442-400-9096 [email protected] http://www.linkedin.com/in/timothyshea --001a11c2f43488420404fc8b0116 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">>=C2=A0<span style=3D"color:rgb(0,0,0);font-family:aria= l,sans-serif;font-size:13px">Thoughts on IPv6?</span><div><span style=3D"co= lor:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px"><br></span></di= v><div><span style=3D"color:rgb(0,0,0);font-family:arial,sans-serif;font-si= ze:13px">Meh. =C2=A0Is this the year of IPv6? =C2=A0Or was that last year? = =C2=A0Or next year? =C2=A0I'm sure it will come up in some meeting and = we will table it to next year. =C2=A0But I'm sure someone here will spe= nd a lot of text here to inform that I must absolutely convert now even tho= ugh it provides no value to our business nor are we seeing any demand (even= in our asian markets). =C2=A0</span></div> <div><span style=3D"color:rgb(0,0,0);font-family:arial,sans-serif;font-size= :13px"><br></span></div><div><span style=3D"color:rgb(0,0,0);font-family:ar= ial,sans-serif;font-size:13px">>=C2=A0</span><span style=3D"color:rgb(0,= 0,0);font-family:arial,sans-serif;font-size:13px">Thoughts on "Cloud F= irewalls?"</span></div> <div><span style=3D"color:rgb(0,0,0);font-family:arial,sans-serif;font-size= :13px"><br></span></div><div><font color=3D"#000000" face=3D"arial, sans-se= rif">Meh. =C2=A0For office perimeter protection - most vendors that offer &= quot;firewall as a service" fail at the basics. =C2=A0Like keeping the= ir service up. =C2=A0Or advance notice of changes. =C2=A0Or even returning = phone calls. =C2=A0</font></div> <div><font color=3D"#000000" face=3D"arial, sans-serif"><br></font></div><d= iv><font color=3D"#000000" face=3D"arial, sans-serif">As for our cloud host= ing properties we are moving network ACL's to the individual hosts (we = are moving to this model at our physical properties as well). I have notice= d with some amusement vendors trying to dump all their bloated code unto an= image to deliver a 'cloud firewall' without any optimization or en= hancements to take advantage of cloud features (*cough* checkpoint *cough*)= . =C2=A0</font></div> <div><font color=3D"#000000" face=3D"arial, sans-serif"><br></font></div><d= iv><font color=3D"#000000" face=3D"arial, sans-serif">>=C2=A0</font><spa= n style=3D"color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px">Th= oughts on Web Application Firewalls?</span></div> <div><span style=3D"color:rgb(0,0,0);font-family:arial,sans-serif;font-size= :13px"><br></span></div><div><font color=3D"#000000" face=3D"arial, sans-se= rif">Wouldn't implement a web app without one. =C2=A0Its vital to rapid= ly=C2=A0react to application issues, implement rate limiting,=C2=A0enforce= =C2=A0white/black listing, keep software engineering honest, and provide vi= sibility into the web stack. =C2=A0</font></div> <div><br></div><div><span style=3D"color:rgb(0,0,0);font-family:arial,sans-= serif;font-size:13px">I'm going to grab some popcorn and see where this= discussion goes. =C2=A0:)</span></div><div class=3D"gmail_extra"><br><br><= div class=3D"gmail_quote"> On Mon, Jun 23, 2014 at 10:16 AM, Paul D. Robertson <span dir=3D"ltr"><<= a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a>= ></span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0= 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> It's quiet here- I'd like to stir up some discussion...<br> <br> Thoughts on IPv6?<br> Thoughts on "Cloud Firewalls?"<br> Thoughts on Web Application Firewalls?<br> <br> Paul<br> ______________________________<u></u>_________________<br> firewall-wizards mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank"= >firewall-wizards@listserv.<u></u>icsalabs.com</a><br> <a href=3D"https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards"= target=3D"_blank">https://listserv.icsalabs.com/<u></u>mailman/listinfo/fi= rewall-<u></u>wizards</a><br> </blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div dir=3D"= ltr">Tim Shea, CISSP, ISSAP, CISM<br>442-400-9096<br><a href=3D"mailto:tim@= tshea.net" target=3D"_blank">[email protected]</a><br><br><a href=3D"http://www= .linkedin.com/in/timothyshea" target=3D"_blank">http://www.linkedin.com/in/= timothyshea</a></div> </div></div> --001a11c2f43488420404fc8b0116-- --===============1302237623== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ firewall-wizards mailing list [email protected] https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards --===============1302237623==--