Hi all.  I have been giving some thought to use Solaris SKIP between all hosts
in my DMZ to prevent cleartext from being sent host-to-host.

I understand this has quite a few advantages, but I also believe there are
disadvantages, including:

- All text is encrypted, including a hacker attempt
- Overhead involved with encryption
- If the SKIP interface goes down, the host is unreachable

I believe SKIP would be a better solution than using SSH, because it doesn't
involve changing the day-to-day programs that are used for communications
between hosts, and I believe it is already included with the Solaris license.

Can anyone provide a pointer to further information on the pros and cons?

Thanks,
Dave Wreski

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to