On Fri, Jan 7, 2011 at 9:00 PM, Dobbins, Roland <rdobbins@arbor.net> wrote:
On Jan 8, 2011, at 8:54 AM, William Herrin wrote:
I presume you don't intend us to conclude that a bastion host firewall provides no security benefit to the equipment it protects.
If it's protecting workstations, yes, it has some positive security value - but not due to NAT.
Hi Roland, I see. Would I misstate your view if I characterized it as: "A bastion host firewall which simulates identical IP addresses on both sides provides at least as effective security as an otherwise identical firewall which does not." Regards, Bill Herrin -- William D. Herrin ................ herrin@dirtside.com bill@herrin.us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004