Without trying to start a product war. Raptor 6.5 has
been around for a while now and does support the "ALL
Services" functionality, can easily facilitate single
services without the GSP hassles and has much better
Out Of Band authentication within the possibilities of
the protocols.
Personally I am very keen on Proxy based Firewalls. In
a recent Firewall comparison, for which I
unfortunately cannot find the URL, Raptor was the only
Firewall that prevented the http attack tested.
A good mailing list with searchable archives can be
found on: http://www.firetower.com/
Just my $0,02
[EMAIL PROTECTED] wrote:
>
> Ramon,
>
> As with any proxy/application based firewall
the vendor needs
> to provide a proxy/application for the firewall
software to
> permit access to services on the exterior side of
the firewall. That
> is the limitation of proxy/application based
firewalls. You are at the
>
> mercy of the vendor to write proxies for services to
pass through the
> firewall.
> With the raptor firewall there is some
leeway though. There is
> a GSP or Generic Service Passer service that will
allow
> you to pass services that are not defined or have a
proxy for the
> firewall out of the box. The down side of this you
will lose some
> logging resolution and you will not be able to
authenticate if you so
> desire. Plus it is a pain to set these up and you
must set them up
> for each new service you would like to allow through
the firewall.
>
> Take it from me this is one of the reasons we are
phasing out Raptor
> in favor of Check Point.
>
> -Keith Menard
> -Senior Network Engineer
> -Applied Communications Inc.
> -330 S 108th Ave.
> -Omaha NE 68154
>
> "Ramon Perales"
> <[EMAIL PROTECTED]> To:
> Sent by:
[EMAIL PROTECTED]
> [EMAIL PROTECTED] cc:
>
Subject: Raptor:
> 07/13/2000 08:44 AM Filter vs.
Rules
>
> Hi folks,
>
> Nice a pleasure come back here.
> I am newbie with Proxy Firewalls, but the real
problem
> is that the documentation with Raptor 6.0 for
Solaris
> 2.6 is very poor.
>
> How you can permit to everybody in your inside
network
> to browse and connect to every service or protocols
> (IP, TCP and UDP) through the Raptor?
>
> -With Rules I only can permit only 12 services and
> PING, but no more.
> -With Filters, I read that it is only for VPN.
>
> I am not sure if Filters on each interface is only
> what I need.
>
> TIA
>
> Javier
> _7aV1Er.
>
> Tu correo gratis en MixMail http://www.mixmail.com
> Inicia tu navegacion en http://www.ya.com
> -
> [To unsubscribe, send mail to
[EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
__________________________________________________
Do You Yahoo!?
Get Yahoo! Mail � Free email you can access from anywhere!
http://mail.yahoo.com/
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
