Ronneil,
Forgot to answer the last two questions.
#Although, it's not an issue. It could really be Firewall. And how
#come, I asked him if it supports stateful packet inspection and he
#answered
1. Yes the firewall is called the AIX Firewall from what I remember.
(Someone correct me if I am wrong on the next statement)
2. Even a packet filtering device can (from a marketing standpoint) do
'stateful inspection.' They are not talking about the 'Stateful
Inspection' engine that Checkpoint Firewall-1 uses or the one the PIX uses.
They mean that the firewall maintains state. If machine A on the internal
network is allowed to http out to the external network then the HTTP
packets generated from the web server on the external web server need to
get back to machine A through the firewall. This is commonly done using a
state table (or whatever it is called). So, therefore, a marketing guy can
claim that any firewall using a state table does 'Stateful Inspection.'
Regards,
Jeffery Gieser
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
