Jatin,
These questions typically have very long answers, here's the 5 cent version
Firewall is a generic term and due to wide misuse by vendors doesn't really
mean anything specific, if it ever did. In general, a firewall is simply a
system or set of systems for controlling traffic flows, typically between a
trusted and untrusted or less trusted network.
A proxy can be compared to a filtering device or a stateful filtering
device. In basic terms, a "true" proxy behaves as a server to the "real"
client and a client to the "real" server. It sits in the middle of a
connection and severs the client-server relationship and thus can examine
all elements of a traffic flow. A filter or stateful filter doesn't severe
the client-server relationship but instead examines various parts of the
packet, sometimes including the data portion, checking to make sure the
packet is acceptable. Various vendors look at different parts of the packet
and use different criteria to decide what is acceptable.
Which is better is a religious discussion. The answer depends on the
criteria you believe is important and/or what vendor you ask.
PIX supports stateful inspection, not true proxy mode.
I would advise you to get a copy of "Building Internet Firewalls" by Chapman
and Zwicky. It's a bit dated but still a very good reference.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jatin
Sent: Monday, June 25, 2001 7:38 AM
To: [EMAIL PROTECTED]
Subject: Firewall & Proxy [7:9785]
HI ,
What is the difference between firewall and proxy server ?
Which is better ?
Does PIX support both ( Proxy and Firewall )
Please help
Thanks In Advance.
Jatin
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9801&t=9785
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
