There is more to making a network and its hosts secure than a "Firewall". These products are gateways in reality, the Firewall is the security filter in its entirety. This includes the routers and switches and internal proxy servers as well as any mail forwarders. There is more to a "Firewall" than installing a vendor product and saying you are secure.

Security still comes down to having good people and procedures. It does not matter what the products are, they may all be secured (with varying degrees of ease), it is more how they are deployed and managed. Gauntlet needs to be installed on a "SECURED" host. This is the main issue as this rarely occurs with "Security Vendors" sending "Engineers" with little or no training to install these. A 1 week course does not teach security. It comes from experiance.

These problems are an anoyance rather than a security compromise if the network is configured correctly in the first place.

Regards,

Craig S Wright

wright_c (at) demorgan.com (dot) au [email concealed]

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/40/2007#2007