[isalist] Re: Nothing is secure like PIX

  • From: John Becker <becker1@xxxxxxxxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Wed, 21 Jun 2006 10:03:25 -0700

Relative to Jim ;-)
On Wednesday, June 21, 2006, at 09:11 AM, Thomas W Shinder wrote:

Normally mild mannered? :)
 

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


 

<image.tiff>
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of John Becker
Sent: Wednesday, June 21, 2006 10:44 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Nothing is secure like PIX


An impressive outburst from the normally mild mannered TWS. Enjoyed it immensely!

JB
On Wednesday, June 21, 2006, at 08:05 AM, Thomas W Shinder wrote:

Hi EM,

You are right. PIX is not very secure. It's a router with some advanced ACLs and does neat routing tricks. But when it comes to security, you're very very wrong that it's more secure. Hardware doesn't fall from heaven, and all "hardware" is controlled by software, and Syphco's core compentancy is not application protection -- it's routing and switching.

I agree that there is no comparison between PIX and ISA -- only a fool would be convinced that they get any real security from a PIX, becuase they never took the time to learn about network security and what the end game was. Check Point? That's another story.

Other related posts: