Re: [FW1] basic security question- a little off topic

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Donna,
I am unaware of any security issues.  I thought that is what a firewall was for.
Proxies are great, for the several services that they support.  I concur with robert
and steve that you probably would want to use proxies primarily for content caching,
but as for not having default routes --- well that will only limit your potential
for use of the internet as not all services are proxy-able.

just my 2cents
CryptoTech

donna.m.oconnell@verizon.com wrote:

> Hello all,
>
> I would be interested in your opinion about any security issues  about
> default routes.  The issue has been raised here that we should not have a
> default route pointing to the internet (thru a FW, of course).  The
> internet access should be handled with proxies at the FW level.   I do not
> see any issues, secuirty or otherwise, with a default route  but am I
> missing something?  It seems without a default route I will have a lot of
> headaches (similar to the one I have right now!)
>
> Thanks,
> Donna
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================