Re: What to use for a Firewall device?

I'm a long way from a security expert; I lean heavily towards the
productivity side of things. And we all know that the concepts of security
and productivity are quite often at loggerheads with each other ;-).

But I do listen to what the security people have to say. And, the security
people have previously said that ISA, while good, has credentials, etc. -
has not given them the confidence they seek, and they preferred to use other
methods.

However, I've heard some of the same security people speak (including
several whos opinions I highly value) and their tune has changed
significanly with ISA2k4. I want to trust expert opinions. No, I have to
trust expert opinions.

You may in fact be a security expert, Leythos, but this statement:

> My experience with ISA has been limited these last few years,

Might indicate that it's time to evaluate ISA in it's current form ;-).

--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !


"Leythos" <void@xxxxxxxxxxx> wrote in message
news:MPG.1d34c5828085b422989978@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> In article <#6vpHBWgFHA.3132@xxxxxxxxxxxxxxxxxxxx>, ebrind@xxxxxxxxxx
> says...
>> Why would you never trust ISA?
>
> I trust what has been proven in my own clients offices and facilities,
> and I don't trust anything from Microsoft that includes the word
> Firewall. I'm an old die hard that has never had a client compromised,
> not ever, not any system, and I've been doing this since the late 70's.
> I design secure networks and working environments for industrial plant
> floor systems and health-care groups with multi-branch office locations.
>
> My experience with ISA has been limited these last few years, but I was
> not impressed with it when I look at the features that most of the
> appliances provide. Most of the appliances provide an SMTP proxy the can
> remove attachments based on file extension, they also provide a HTTP
> proxy that can remove content from the http stream, they also provide
> for real LAN and DMZ separation and clear rules that indicate such.
>
> You may have good luck with ISA, but I don't trust it, nor anything
> security from MS. While being a MS Partner I've installed hundreds of
> systems this year (mostly servers) running 2003 or XP SP2 based
> workstations, but I would never trust MS to protect my network from the
> inside or outside.
>
>
> --
> --
> spam999free@xxxxxxxxxx
> remove 999 in order to email me


.

Relevant Pages

  • Re: SBS03 VS SBS08
    ... running sbs with isa, at the very least, i trust it. ... That's the fatal flaw of any security solution - to trust it. ...
    (microsoft.public.windows.server.sbs)
  • RE: Front End/Back End communication
    ... MVP -- ISA Firewalls ... There is no such thing as security perfection. ... single front-end/back-end Exchange Server will find this setup to be ...
    (Focus-Microsoft)
  • RES: ISA firewall
    ... If we want to judge ISA as a firewall product (or if you want to judge ... Linux) were compromised by a security hole that was identified days ago, ... flaws, so does every single bit of line of code out there. ...
    (Security-Basics)
  • Re: Least User Priviledges for Network Administrators
    ... Trust how? ... Do we trust them to maintain network equipment? ... Do we trust them to observe proper security practices on the desktop, ... Training users that need administrator access to logon as a regular ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Forest/Domain in the "DMZ" to accomodate web, front-end servers
    ... Now as for ISA 2004 being a seamless application layer inpspection security ... out of it too, but I have 500 servers, and 3000 desktops to worry about. ...
    (microsoft.public.security)
Loading