whizlab question
DComTalk.com Forum Index DComTalk.com
Discussion of VoIP, VPN, Video Conferencen, DSL and other data commucations.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web dcomtalk.com
whizlab question

 
Post new topic   Reply to topic    DComTalk.com Forum Index -> Firewalls
Author Message
fmarchioni
Guest
Posted: Fri Dec 16, 2005 9:23 am    Post subject: whizlab question Reply with quote
Hi all,
I'm going to attend an application server architect exam. In this exam
there are some network/security questions too.

One of these is the following:

What type of firewall will you use to the validate the application
protocol of a network communication?
· a. SSL
· b. Packet Filters
· c. Stateful packet Filters
· d. Proxy

I think, since application protocols are tied to a known port it could
enough a static packet filter, that checks if the packet is going
through one certain port.....

What do you say ?

Thanks a lot
Francesco
Back to top
Walter Roberson
Guest
Posted: Fri Dec 16, 2005 9:23 am    Post subject: Re: whizlab question Reply with quote
An application protocol would be, for example, that an SMTP
"RCPT TO" command does not occur until after a "MAIL FROM" command.
Static packet filters are not able to check that.

SSL is not a firewall: it is a secure transport mechanism.
It doesn't care whether what is sent over it matches the application
protocol or not.
--
I was very young in those days, but I was also rather dim.
-- Christopher Priest
Back to top
 
Post new topic   Reply to topic    DComTalk.com Forum Index -> Firewalls All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




VoIP Solutions: Telephone Systems Electronics Satellite TV Tech & Gadgets
Powered by phpBB