RE: NT NAT

[Russ <Russ . Cooper @ RC . on . ca>]

>There is now an NT NAT. http://www.on.com.

I hate to do this without looking at the product first, but here's an
excerpt from their web page describing the features their IP Funnel
product provides;

.Protects your internal IP servers and workstations from Internet
hackers 

Now for a company that sells a Firewall, you'd have to wonder how much
they understand security, wouldn't you? Never before have I ever seen
anyone attempt to claim that NAT by itself makes your entire internal
network secure from Internet hackers, but finally someone has actually
done it. We don't need Firewalls any more folks, all we need is NAT. Too
bad the NAT RFC doesn't mention that it was created to do away complete
with Firewalls, we could have all saved ourselves a whole lot of effort
and time.

Their network diagram describing how the system would be placed has it
behind a router and in front of the internal LAN. So now someone would
seem to think that it is highly desirable to dedicate an NT Workstation
to the task of NAT-only. Me thinks you could probably get a new router
that supports NAT for less money.

Maybe their marketing staff is made up of rejected Microsoft
marketeers...???

Cheers,
Russ
R.C. Consulting, Inc. - NT/Internet Security Consulting