RE: Multiple firewalls from different manufactureres

["Paul D. Robertson" <paul () compuwar net>]

On Fri, 28 Jan 2005 MHawkins () TULLIB COM wrote:

> Interesting, it just occurs to me that you could implement RFC's in
> programmable logic arrays.

You might want to read an RFC or two before going any further with that
proposal...  FTP anyone?

> Then your firewall would be much less hackable. Indeed, you would have a
> very strong security story if you could point to an appliance that had
> anything above layer 3 deployed in programmable logic arrays.

Hardwired bugs are no fun.  Being useless because you can't work around
other's bugs is no fun (for instance the PIX SMTP fixup fix on my Postfix
implementation gets triggered quite often.)

> I think the end point of that would be RFC on ASIC's.
>
> Hmmmmmm...

Take the IPSec standard, give it to two teams, and have them implement it.
Now, make the two products interoperate.


Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
paul () compuwar net       which may have no basis whatsoever in fact."
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards