Hi, 1 : it depends on how your routes are managed. It's easier (sometimes harder to build but easier to maintain) to have a full dynamic routing network. but for the firewall admin, it means more ports to open, multicast adresses to allow, and a lot of doc reading. the frontier between network and security becomes thinner and thinner.
2: sometimes, you're forced to use dynamic routing if you want to forward multicast, you can't use vrrp or hsrp. so for redundancy reasons you're forced to use dynamic routes. I don't know anything about other protocols (bgp, etc.), so don't ask me about those ones :) Nicolas Figaro -----Original Message----- From: Gwydion Mine [mailto:[EMAIL PROTECTED] Sent: lundi 6 octobre 2003 18:13 To: [EMAIL PROTECTED] Subject: [FW-1] Hello, Can you folks please tell me what your thoughts are on firewalls in a dynamic routing environment? (OSPF/RIP) This is for open discussion. I'm not looking for people to write back and ask me for a more specific question...I just want to know what everybody's opinions are, from a security point of view, on the configurations they've worked on. thanks a lot!! Gwyd ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
