A firewall for all occasions
Firewalls are ubiquitous, but no size fits all. When it comes to granular security analysis, gateway-based firewalls (proxy-based) are the best, closely followed by stateful inspection, then stateful (also called dynamic) filters, with static packet filters providing the least security processing. Yet, in terms of manageability, the list is reversed: packet filters are the most "plug-and-playable"; app proxies are the least.
So how can you decide which type of firewall is right for your organization? Which one strikes a good balance between security and functionality and cost and manageability?
To answer this question, I'll examine three infrastructures: a small office; a medium- or large-sized office with common needs; and a large office with complex needs.
[ Read more ]
- Article: Firewall + Firewall Policy = Improved Security (2 April 2003)
- Article: Interview with Lisa Yeo, author of "Personal Firewalls for Administrators and Remote Users" (30 March 2003)
- Review: Personal Firewalls for Administrators and Remote Users (13 March 2003)