> Ascend has recently come out with a really effective firewall which is a
> software option for many of their routers. From the marketing spec, it
> looks like a modified approach on a packet filtering technology and it's
> clearly states that is not proxy based. Any thoughts on how secure it may be?
>
> Rene
>
Sure. It is derived from the Morningstar firewall router technology
which they recently acquired. Morningstar's modus operandus is the
"dynamic packet filter." According to the Morningstar tech reps I
spoke to, their filters open a given port(s) only when the router CPU
sees an authorized connection request. The filter stays open for the
duration of the session and then goes away. The ports do not remain
open by default. Great for reducing ports scannable from the outside to
a minimum.
This approach offers more security than classical packet filtering
(static filters). It does not offer the kind of control and granularity
you get with an application gateway firewall. The Morningstar
technology will probably do better now thanks to Ascend's market
position.
Regards,
David
|
|
