[4848] in WWW Security List Archive
Packet Filters or Proxy Firewalls?
daemon@ATHENA.MIT.EDU (Simon Yeo)
Wed Mar 19 01:48:26 1997
Date: Tue, 18 Mar 1997 20:47:40 -0800 (PST)
From: Simon Yeo <syeo@cs.stanford.edu>
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
Hello,
We're looking to set up an interior firewall for our internet network
mainly consisting of NT machines. We already have an exterior firewall
set up, and will put our web, mail, and dns servers in the perimeter zone
(between the two firewalls).
I have had some experience with packet filtering routers (CISCO), so I'm
inclined to purchase a similar router for the firewall. Before I do that,
I need some opinions on why I should choose a proxy firewall instead of a
simple packet filtering router, and visa versa. Things to consider are:
1) Cost
2) Performance
3) Management cost (maintenance)
4) Level of security
5) etc.
Thanks in advance,
----
Eclipse Technical Group
Sr. IS Specialist
Simon Yeo