Great Circle Associates Firewalls
(September 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: FW for ATM traffic?
From: woods @ ucar . edu (Greg Woods)
Date: Tue, 24 Sep 96 13:09:26 MDT
To: nguyen1t @ ncr . disa . mil (Tu Nguyen)
Cc: firewalls @ GreatCircle . COM
In-reply-to: <9608248435 . AA843597406 @ ncr . disa . mil>; from "Tu Nguyen" at Sep 24, 96 1:31 pm

>      Is there any FW that can handle ATM traffic as shown below:

I presume you mean "at ATM speed". You could get a Sun Enterprise 3000
system, install a couple of cisco ATM cards, and install the TIS toolkit,
and you'd have a firewall that looks like your diagram. Whether that
meets your needs is another story; it's unlikely traffic could flow
through such a firewall at full ATM speed.

My understanding (which I have not personally verified) is that there
are ATM switching devices that can be used to control where ATM circuits
can and cannot be set up, but that would provide protection on at best
a per host or per site basis; no way to control which services on the
target machine can be accessed once the circuit is in place.

There is a paper describing research in progress on ATM firewalls.
You can find it at

http://www.network.com/~hughes/Interop-eng96-1.0.ps

--Greg


Follow-Ups:
References:
Indexed By Date Previous: Re: PC-Windows based Sniffer
From: Ron Shacham <shacham @ shasta . Stanford . EDU>
Next: Re: PC-Windows based Sniffer
From: Shahryar Jahangir <sj @ bear . com>
Indexed By Thread Previous: FW for ATM traffic?
From: "Tu Nguyen" <nguyen1t @ ncr . disa . mil>
Next: Re: FW for ATM traffic?
From: Robert Hanson <roberth @ cet . com>

Google
 
Search Internet Search www.greatcircle.com