In one of his Open Networking Summit blog posts Jason Edelman summarized the presentation in which Goldman Sachs described its plans to replace stateful firewalls with packet filters (see also a similar post by Nick Buraglio).
These ideas are obviously not new – as Merike Kaeo succinctly said in her NANOG presentation over three years ago “stateful firewalls make absolutely no sense in front of servers, given that by definition every packet coming into the server is unsolicited.” Real life is usually a bit more complex than that.
Read more ...Thanks for reading my news about Are stateless ACLs good enough? at my blog Bros Droid if you want too share this article, please put the resource, and if you think this article is very usefully dont forget to bookmark this site with CTRL + D on your keyboard to web browser.
More Articles :
IPv6 ND Managed-Config-Flag is just a hint- Redundant DMVPN designs, Part 1 (The Basics)
- Can we really ignore spaghetti and horseshoes?
- Building IPv6 Access Networks Webinar
- VXLAN, IP multicast, OpenFlow and control planes
- Are Provider-Independent IPv6 prefixes really global?
- ipSpace webinars – peek before you buy
- Should I use 6PE or native IPv6 transport?
- Embrane heleos: Scale-out Virtual Appliances
- FCoE and LAG – industry-wide violation of FC-BB-5?