actually genous, a layer 3 firewall is simply a packet filter such as a
router that is not state aware. Most firewalls these days will do some level
layer 3~7 inspection. Such as keeping state and performing RFC, application
specfic inspection.
The top 3 firewalls in the market Juniper Netscreen, Checkpoints, Cisco all
do more than layer 3 inspection.
Joe
On 10/24/06, Mario A. Spinthiras <mario@netway.com.cy> wrote:
Ivan . wrote:
> There are more App based firewalls around, like
>
> http://www.netcontinuum.com/
>
> cheers
> Ivan
>
> On 19 Oct 2006 21:21:59 -0000, joekim13@gmail.com <joekim13@gmail.com>
> wrote:
>> do you need layer 7 inspection or layer 7 proxy?
>>
>> For proxy fw's sidewinder ( dont' really prefer to use them) or
>> Symantec Gateway Security applicances ( symantec announced they are
>> discontinuing).
>>
>> As for fw's i'd recommend a Netscreen fw as they can have IPS/IDP
>> blades in combination with a stateful inspection firewall. Check out
>> the ISG line.
>>
>> Another decent layer 7 inspection fw is checkpoint. but costly and
>> limited # of layer 7 inspection.
>>
>> Joe
>>
>
>
Layer 7 proxy ? What does that do deny you from entering input in a CLI
or clicking on a "cancel/apply/ok" button in a GUI ? A firewall is based
on performing filtering tasks on a layer 3 protocol!
I haven't really heard of such a firewall but heck ive seen stuff in our
line of business that you dont see on any city's Saturday night.
Firewall = application
Its filtering process = Layer 3 (IP)
EOF
Have a nice day,
Mario A. Spinthiras
P.S id enjoy more challenging topics with regards to firewalls. Thank you.
