Websites that give a good analysis and comparison of SPI and Application Layer Firewalls.

We currently have a SPI based firewall and I have just recently found out about application layer threats (HTTP tunneling) and firewalls. I need a good source of information that compares and contrasts both and discusses the threats of each type in order to make an evaluation and decision.

Your opinions and experience may be helpful but I can't give points for them, I need hard evidence and facts to back up my proposal to upper management. Many and varied sources will be helpful.
awilson11Asked:
Who is Participating?
 
lrmooreCommented:
Very recent firewall comparison articles:
http://nwc.securitypipeline.com/howto/160911515
http://www.networkcomputing.com/showitem.jhtml?docid=1608f1

Neither article featured the brand-new Cisco  Adaptive Security Appliances, or even the PIX 7.0 Firewall
http://www.cisco.com/en/US/products/ps6120/index.html
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet0900aecd80225ae1.html

One thing to note. The US Department of Defense only allows two firewalls: Cisco PIX and Sidewinder G2.

I have extensive experience with Cisco PIX and I am extremely excited to be working with the newest ASA and latest release of PIX 7.0.  Cisco continues to lead the pack with Best Business Practices, and the products to make it happen.
 

 
0
 
awilson11Author Commented:
The first two are good overview sites but don't get into the necessary details of SPI and Applicaiton Layer.


We currently have a SonicWall SPI firewall and are considering implementing ISA 2004 on a hardened appliance. But I need information that delves into the threats that an application layer firewall prevents that SPI doesn't to sell a second layer of defense to the decision makers.

At present we are not considering Cisco.
0
 
awilson11Author Commented:
I am requesting this question be deleted, the only solution provided was no help.
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
lrmooreCommented:
>Just a note: Your question asks for comparisons and an opinion, and you received both.

Agree  <8-}
0
 
awilson11Author Commented:
I asked for a comparison and discussion of application layer firewalls and SPI firewalls.

"We currently have a SPI based firewall and I have just recently found out about application layer threats (HTTP tunneling) and firewalls. I need a good source of information that compares and contrasts both and discusses the threats of each type"


I was not asking for a comparison of different firewall models.
0
 
awilson11Author Commented:
I am more than willing to give the points to somebody who can provide links to sites that discusses, compares, contrasts and analyzes SPI firewalls and Application Layer firewalls.

I am not interested in the different models and products offered by companies. We already have the models we want in mind.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.