Re: A DMZ/Firewall Question

2000-08-16 Thread Benjamin Scott
On Wed, 16 Aug 2000, Paul Lussier wrote: > O'Reilly has an excellent book on the subject, Building Internet > Firewalls, which describes all types of firewall configurations; using > both commercial products, homegrown solutions, and a mix. (Unfortunately > is a little dated, since it doesn't inc

Re: A DMZ/Firewall Question

2000-08-16 Thread Paul Lussier
In a message dated: Tue, 15 Aug 2000 18:32:35 EDT "Dave Nichols" said: >Folks, > >Just a question coming out of some work I'm doing today. I was always >taught a double Firewall surrounded a TRUE DMZ (one in front, one in back). > >I see more and more people representing DMZ's coming off a SING

Re: A DMZ/Firewall Question

2000-08-15 Thread Derek Martin
Yesterday, Dave Nichols gleaned this insight: > Folks, > > Just a question coming out of some work I'm doing today. I was always > taught a double Firewall surrounded a TRUE DMZ (one in front, one in back). > > I see more and more people representing DMZ's coming off a SINGLE firewall, > the s

Re: A DMZ/Firewall Question

2000-08-15 Thread Kenneth E. Lussier
Dave, It all depends on the needs of the customer, and how much they want to spend. You can actually achieve the same effect with one firewall as you get with two depending on how it is set up. Kenny Dave Nichols wrote: > > Folks, > > Just a question coming out of some work I'm doing today.

Re: A DMZ/Firewall Question

2000-08-15 Thread Bruce Dawson
I believe there's a difference between what I call a "logical" firewall and a "physical" one. The physical one being separate boxes with separate segments coming out of them (segments == wires); usually just routers. A logical one can have one (or more) segments with one or more networks on each s

A DMZ/Firewall Question

2000-08-15 Thread Dave Nichols
Folks, Just a question coming out of some work I'm doing today. I was always taught a double Firewall surrounded a TRUE DMZ (one in front, one in back). I see more and more people representing DMZ's coming off a SINGLE firewall, the same one which protects the corporate jewels... and implementi