ahulett
Life Without Walls
Premium
join:2003-02-02
Bellevue, WA
| Both Ways.
Saying an inbound-only firewall is sufficient is like saying a customs check is only needed for those entering a country, and those leaving it are free to enter neighboring countries unchecked. An inbound firewall is ineffective against viruses/trojans/malware on CDs, floppies and USB memory devices, and items slipping by email defenses.
You need security checks both ways.
--
Aaron Hulett | Trojan Analyst | Mischel Internet Security |
|
dave
Premium,MVM
join:2000-05-04
not in ohio
 ·Verizon Online DSL
 ·Verizon FIOS
| said by ahulett  :
Saying an inbound-only firewall is sufficient is like saying a customs check is only needed for those entering a country, and those leaving it are free to enter neighboring countries unchecked.
And that's how customs works for the majority of travellers.
Fly from USA to UK? You're inspected by UK customs. USA customs doesn't look at you.
Return from UK to USA? You're inspected by USA customs. UK customs doesn't look at you. |
|
blackjeep
join:2001-07-12
Atlanta, GA
| reply to ahulett
Have you ever been thru a customs check? Try going across the border into mexico. You can drive right across or walk across with virtually not even a glance from the mexicali police. But try just driving back from Mexico, or carrying a bag walking across the border and see what happens. They are going to stop you, and search you, and if they find ANYTHING suspicious, they'll strip search your car for contraband. Unidirectional border. |
|
ahulett
Life Without Walls
Premium
join:2003-02-02
Bellevue, WA
| reply to dave
I was using the customs checkpoint as a whole as the comparison to firewalls.
You may not get "thoroughly checked" by a customs agent, but your passport's still processed, right?
--
Aaron Hulett | Trojan Analyst | Mischel Internet Security |
|
ahulett
Life Without Walls
Premium
join:2003-02-02
Bellevue, WA
| reply to blackjeep
"Have you ever been thru a customs check?" My passport says I have. That's fun, getting your bag's contents spread across a table in front of everyone. At least I haven't had that happen to me, yet. But I've seen it happen to people I know.
"You can drive right across or walk across with virtually not even a glance from the mexicali police."
Guess you could compare that to a security hole in a firewall.
Is there some reason we're taking this so literally? It was a comparison to help understand my point, not a "this is exactly how firewalls work... just like customs checkpoints" statement.
So....... imagine that the ONLY way from one country to another is ONLY by going through a boarder crossing. No illegal methods. Does that help bulletproof the comparison?
Sheesh.
--
Aaron Hulett | Trojan Analyst | Mischel Internet Security |
|
