Screening Router as a firewall

["Shimon Silberschlag" <shimons () bll co il>]

Hello group,

Having a request for at least 2 firewalls protecting internet connectivity, 
would you consider a border router with ACLs as the first firewall, or would 
you demand to implement ACLs on the router and 2 other "traditional" 
firewalls?

If you select the first option, would simple "packet filter" type ACLs 
suffice, or would you demand "stateful" ACLs?
(I believe Cisco calls its implementation CBAC).
If you select the second option, would you demand that the 2 firewalls be of 
different brand, different technology or can they be the same product?

Can ISA2004 serve as the second, internal facing firewall? Anyone using it 
as such?

TIA,

Shimon Silberschlag

+972-3-9351572
+972-50-7207130

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards