Dr. Frederick B. Cohen wrote:
> mjr wrote:
> > I don't think your perspective is foolish, I just think
> > you're confusing an apple with an orange. Firewall performance
> > under load is an important issue. Firewall security is an important
> > issue. Most firewalls will have the same security properties under
> > load as they do when unloaded; therefore most people treat the
> > issues as separate.
>
> I would like very much to believe you, but apparently, you have not
> tested this and so don't know if it is really true. In fact, almost
> every system I am aware of has far different security properties under
> high-load conditions than under low-load conditions. The "most" people
> that treat these issues separately are perhaps in need of additional
> education.
so then it's your conjecture against mjr's. if you posted some
concrete examples we might understand what you're talking about.
as it is, my experience agrees with mjr's. if possible your examples
should be unix firewalls running application gateways, so that we'll
be comparing, if not oranges and oranges, at least citrus fruit.
--
eric murray ericm @
lne .
com
References:
|
|
