Great Circle Associates Firewalls
(March 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: packet filtering vs application based firewalls
From: "Marcus J. Ranum" <mjr @ tis . com>
Organization: Trusted Information Systems, Inc. Glenwood, MD
Date: Thu, 2 Mar 1995 13:40:40 -0500 (EST)
To: frank @ prodigy . com (Frank Wortner)
Cc: jim @ Tadpole . COM, Firewalls @ GreatCircle . COM, Jean . Lehman @ west . sun . com, rmck @ sandfiddler . paragon-systems . com
Coredump: Infocalypse Now!!!
In-reply-to: <Pine . A32 . 3 . 91 . 950302112237 . 10351A-100000 @ maily1 . prodigy . com> from "Frank Wortner" at Mar 2, 95 11:26:04 am
Phone: 301-854-6889

>We might as well add the obvious:
>
>	TIS's FTWK		~ $0  (for source!)

	I'd like to mention, of course, that the toolkit is
not a commercial offering, is unsupported, requires expertise
to install, etc, etc. Since the toolkit is just a bunch of
policy-free components, it can be set up to be very secure,
but if not set up carefully, it could leave you open. TIS
includes a DISCLAIMER with the toolkit that we urge people
to read. [We don't want someone setting the toolkit up on
a firewall running NFS and blaming us. :)] For folks who
don't understand UNIX/network security, we'd rather see
them buy a firewall from our *competitors* than build a
firewall with the toolkit, get broken into, and complain. :)

	So, while it's "free" it assumes you already have
some fairly expensive expertise already on your staff. If
so, then you're in good shape.

	The toolkit is also not a commercial product. For
what it's worth, support, documentation, bug-fixes, and
integration make a big difference to some users.

mjr.


References:
Indexed By Date Previous: Re: Using Linux for a firewall.
From: sdw @ lig . net (Stephen D. Williams)
Next: Re: FW-1, etc.
From: Jim Thompson <jim @ Tadpole . COM>
Indexed By Thread Previous: Re: packet filtering vs application based firewalls
From: Frederick M Avolio <avolio @ tis . com>
Next: Netware passwords
From: cbk @ ingress . com (Charles Kaplan)

Google
 
Search Internet Search www.greatcircle.com