william.wells writes:
>Careful here. In my conversations with various vendors, it is not certain
>that firewall-to-firewall encryption, as currently designed, will work
>between different vendors of firewalls.
There are 2 issues here. One is key management and the other
is protocol and encryption algorithms. I suspect that most vendors
who are doing firewall to firewall crypto are basing their work on
the draft standards IETF is working towards. So, any standard-track
firewall crypto should interoperate just fine. The other guys will
lose. :)
Key management is another problem, but as long as you can
exchange keys in a manner that lets your firewalls interoperate
using a standard packet format then you're OK.
mjr.
References:
|
|
