Re: Forrester Research foresees death of firewalls

Adam Shostack (adamhomeport.org)
Mon, 21 Jun 1999 11:02:57 -0400

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Carric Dooley: "Re: Security conference NETSEC 99"
• Previous message: Adam Shostack: "Re: Virus Scanning"
• In reply to: Mellon, Ty: "RE: Virus Scanning"
• Next in thread: Kevin T. Shivers: "Re: Forrester Research foresees death of firewalls"

On Sun, Jun 20, 1999 at 12:21:09PM -0700, David LeBlanc wrote:
| At 10:42 PM 6/16/99 -0400, Adam Shostack wrote:
|
| >Firewalls enter into the picture only as a perimiter tool; you ensure
| >data only gets in on two or three points. The real security will need
| >to be on the servers. Lets stop trying to pretend firewalls are
| >anything more than a stopgap.
|
| I can't agree that firewalls are only a stopgap. I do agree that it is a
| tremendous fallacy to think that because you have a firewall, your network
| is now secure.

A useful stopgap, I'll grant. But I am reasonably firmly convinced
that security needs to become focused at the application layer, and in
that model, firewalls get less and less of the total attention of a
security group.

Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume

• Next message: Carric Dooley: "Re: Security conference NETSEC 99"
• Previous message: Adam Shostack: "Re: Virus Scanning"
• In reply to: Mellon, Ty: "RE: Virus Scanning"
• Next in thread: Kevin T. Shivers: "Re: Forrester Research foresees death of firewalls"

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:19:01 CDT