>Most Unix systems are unfortunately insecure out of the box.
>We should expect all good firewalls to be highly secure out of the box.
I agree 100%. The true test of a firewall package is to see what it does when
you DON't follow the vendor recommended procedures. How does it handle stupid
user tricks? What state does it leave your network when something like that
happens? There's a gap between the people who really read the instructions and those who
just scan the instructions. Unfortunately, I believe the scanners outnumber the
readers...:-).
-Randy Marchany
VA Tech Computing Center
Blacksburg, VA 24060.
Follow-Ups:
References:
|
|
