[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] What level of Service Pack to run?
stolen from phoneboy NOTICE: If you're not running FireWall-1 4.0 SP7 (Solaris, NT, AIX, HPUX, Linux), FireWall-1 4.0 SP5 build 13 (IPSO), or FireWall-1 4.1 SP2 (all platforms) or later, you are vulnerable to a number of security issues. These issues were revealed at the Black Hat 2000 conference and are extremely serious in nature. You can read all about the vulnerabilities here . 1. they don't release sp's for fun 2. build a another solaris box in a test environment, exactly like the one you've got and then upgrade it from sp5 to sp8 or whatever. 3. Sure, stay with the service pack from 1993, and your safe from all those hackers using 1993 technology, don't worry about the ones using modern technology, you won't even notice them stealing your goods. I'm sorry if I sound sarcastic, but this industry is analogous to sharks, once you stop swimming you'll die. the hackers keep finding new holes, and its our job to keep up with them. They (the hackers) stopped using 1993 technology in 1992, if you want to keep using it, great. -----Original Message----- From: Paul Finlayson [mailto:[email protected]] Sent: Tuesday, June 05, 2001 4:53 AM To: [email protected] Subject: [FW1] What level of Service Pack to run? Hi, I'm running Firewall-1 v4.0 SP5 on Solaris 2.6 and have a couple of questions about the level of service pack and version of FW-1 that I should be running. 1. We've been running v4.0 SP5 for a while now having found it to be stable, I'm concerned however that since we've not upgraded to the latest service pack SP8 we might be left with some security issues. a) Are there security issues with SP5 that would be resolved with SP8? We use the SMTP security server heavily and have found it stable in SP5 would upgrading to SP8 cause issues here? Are there any other issues with SP8? b) The upgrade path for v4.1 suggests going to v4.0 SP5 then to v4.1 SP0, if I install SP8 and then wish to upgrade to v4.1 will this cause problems or am I best sticking with SP5 until I am ready to upgrade to v4.1? 2. Should you always keep the service pack level up to date? I've often heard horror stories of problems caused by new service packs rather than problems being fixed. In summary, I have a stable FW-1 v4.0 SP5 setup I am wondering if I should be installing SP8 or should I just stick with SP5? Thanks in advance for your time. Regards, Paul. ********************************************************************** This message may contain information which is confidential or privileged. If you are not the intended recipient, please advise the sender immediately by reply e-mail and delete this message and any attachments without retaining a copy. ********************************************************************** ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|