2000-03-01-08:31:35 [EMAIL PROTECTED]:
> The people that are in the trenches want to every little nook and
> cranny about a particular product. That is why the Crystal Box
> solution previously offered by TIS was an ideal solution. Today,
> none of the vendors offer source code.. :(
Today, those of us who care about such things can build better,
faster, more secure, more capable firewalls than any of the
commercial products, using purely open source software, from the OS
through the packet filtering and on to the proxies.
Commercial firewalls are there to service the wishes of people who
want to throw money at something claiming to be a security solution,
without learning enough to use it effectively. For such people
source code isn't important. They want GUIs, they want it to run on
NT, they want it to allow ICQ, NetMeeting, and whatever glitzy thing
gets invented tomorrow to all work transparently. Security isn't
real protection of identified assets from understood and documented
threats, it's a word on a sticker on the outside of a box, which,
since it was purchased from a vendor, thereby makes the problem
presumably someone else's problem.
-Bennett
PGP signature
