OK, this was my understanding as well.
I think my confusion is based upon colleagues (that I normally consider very
astute) and firewall salesmen confusing the basic functionality of a
"reverse proxy" (which is only for web forwarding) with the added
functionality of an "application proxy" (which actually inspects the
application layer).
To my growing understanding, these two "proxies" are separate entities, and
that when referring to functionality, the terms should be considered
exclusive of each other.
Am I correct?
Thank you for my enlightenment!
| -----Original Message-----
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]]On Behalf Of tech-guy
| Sent: Friday, January 28, 2000 12:27 AM
| To: [EMAIL PROTECTED]
| Subject: Re: Firewalls-Digest V8 #787
|
|
| > - ------=_NextPart_000_0003_01BF6868.1C004350
| > Content-Type: text/plain;
| > charset="Windows-1252"
| > Content-Transfer-Encoding: 7bit
| >
| > Greetings,
| >
| > I believe I have an adequate understanding of how proxy works
| and why it
| is
| > beneficial to implement into ones network security solution.
| >
| > But, I have been unable to find a good source on the benefits of and
| > practical implementations of a reverse proxy. I have bee told by
| "security
| > consultants" that my network should have a reverse proxy, but
| are unable
| to
| > give me a clearly defined answer as to why. (personally, I think the
| people
| > I have been dealing with are just security salesmen, and don't really
| know
| > what the hell they are techno-babbling about).
| >
| > Could someone give me a point of reference to perform further
| research,
| > and/or give me a basic overview of its practical application?
| >
| > Many thanks,
| >
|
| hi,
|
| a proxy server/service normally uses acl's (access control
| lists) for users
| and groups of users. a proxy also can cache webpages for internal lan
| users- that way, they don't have to go all the way to the net to get to
| 'yahoo's homepage' all the time. a 'reverse proxy' is a proxy server
| service that is listening on behalf of another service (ex.
| proxy's ext nic
| interface listening on behalf of an internal http server)
|
|
|
|
|
| _______________________________________________________
| Get 100% FREE Internet Access powered by Excite
| Visit http://freeworld.excite.com
|
| -
| [To unsubscribe, send mail to [EMAIL PROTECTED] with
| "unsubscribe firewalls" in the body of the message.]
|
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
