Great Circle Associates Firewalls
(November 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewall Proxy API
From: Dermot Tynan <dtynan @ fws . ilo . dec . com>
Organization: Digital Firewall Engineering
Date: Wed, 29 Nov 1995 19:35:52 +0000 (GMT)
To: avolio @ trusted . com (Frederick M Avolio)
Cc: dtynan @ fws . ilo . dec . com, maillet @ doc . cs . usm . maine . edu, firewalls @ greatcircle . com
In-reply-to: <9511281830 . AA01463 @ hilo . trusted . com> from "Frederick M Avolio" at Nov 28, 95 01:29:47 pm

I wrote:
> However, for most protocols which would use this type of
> service (such as SQL, etc), the protocol is proprietary, and trying to
> provide something which could handle all the permutations would be
> unwieldy and expensive.

Frederick M Avolio wrote:
> If the protocol is proprietary, but customers require it through a
> firewall, the vendor will make the protocol available to firewall vendors
> (case in point is SQL*NET and RealAudio). My observation is that it is
> usually neither unwieldy nor expensive to accomplish.

I agree that it is relatively easy to do a protocol-specific proxy for
SQL or RealAudio, the point I was making is that there are a *lot*
of custom protocols out there, and trying to cover them all either
with a single "intelligent" proxy, or by application-specific proxies
would be unwieldy and expensive.  If there were only two, we'd all have
done them by now.  :)

Reminds me of the "Scenery Disks" for Flight Simulator; "please insert
your guglioplex proxy disk into drive A: and press return..."
						- Der
-- 
Dermot Tynan						+353 91 754608
dtynan @
 ilo .
 dec .
 com					 DTN: 822-4608

Digital Equipment International BV, Galway, Ireland


References:
Indexed By Date Previous: Re: 3 firewalls broken into?
From: nreadwin @ london . micrognosis . com (Neil Readwin)
Next: A1 Systems?
From: Ted Stockwell <stockwel @ sctc . com>
Indexed By Thread Previous: Re: Firewall Proxy API
From: Frederick M Avolio <avolio @ trusted . com>
Next: Re: Firewall Proxy API
From: CONQUEST @ NETWORK-1 . COM

Google
 
Search Internet Search www.greatcircle.com