>I don't think there is anything an application firewall can
>do that can't also be done by a "packet filter" firewall. The
trivial example:
a smtp application level proxy can disable the "debug" command
for every sendmail behind that firewall.
>new packet filter firewalls are not like the old Cisco/Bay router
>filters. The new systems operate at the network layer, but they
>have knowledge of the protocols and applications. They
>open up the packets and modify the data. These systems are
>doing content filtering and other "application" types of operations.
>Yes, not all of them do these things, but many do, and new
>feature/functions are being added to these systems every year.
jmb
--
Jonathan M. Bresler 202-452-2831 breslerj @
frb .
gov
MS-169 Federal Reserve Board of Governors Washington DC 20551
Speaking for myself. Others speak for the Federal Reserve Board of Governors
Follow-Ups:
References:
|
|
