For those of you who don't receive the Bruce Schneier's CRYPTO-GRAM newsletter, this link is from the current edition. It's titled "A Quantitative Study of Firewall Configuration Errors"
http://www.eng.tau.ac.il/~yash/computer2004.pdf
It gives one way of determing how complex your firewall configuration is and discusses common misconfigurations in Check Point firewalls. The article is recent but the data is from a small study done in 2000-2001 so the majority of the firewalls analyzed are v4.1. I think the points it raises are still valid particularly if upgrades were performed from an earlier version to the current versions.
Ray
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
