FW-1 - less secure ?

[Darren Reed <avalon @ coombs . anu . edu . au>]

> In my experience I'd favor gauntlet as it is a true application level
> proxy gateway. Firewall-1 which is supposed to perform as the fastest
> firewall around is unfortunately a hybrid packet filtering firewall
> therefore it is somewhat less secure (depending on how you setup your
> site of course).

Interestingly, I heard some gossip recently that Checkpoint (& Sun)
weren't sure if Firewall-1 (or any firewall with FW-1 installed) could
"Fail safe".

Darren