Home > Firewalls: A Hammer in Search of a Nail

Viewpoint

Firewalls: A Hammer in Search of a Nail

5/29/2008


So how do you run H.323 video?  The H.323 protocol requires a number of UDP and TCP dynamic ports to complete a successful connection.  While configuring a connection behind a firewall can be done with extensive configuration and testing in some cases, a simpler approach is to put the codec outside the firewall, sometimes called a DMZ (after "demilitarized zone"), and take some precautions such as turning off FTP, Telnet, Web, and SNMP.  For more information, go to MOREnet's technical support Web site.

Grid Computing
Grid computing is another advanced application that frequently encounters difficulties when run between networks protected by firewalls.  This is particularly true for for grid applications with huge bandwidth demands running over single data stream.  A good description of the challenges of running grid applications in firewall-protected networks can be found in the 2006 Open Grid Forum document Firewalls Issues Overview.  The article explains why grid-related systems often end up positioned outside an institutional firewall, in the "DMZ," or connected via a dedicated high-performance link.

Conclusions
Perhaps the time has come to reconsider our reliance on firewalls for network security and to consider the importance of network usability and the concept of the network as a big dumb pipe.  A good place to start is to join the discussions on Salsa (Security At Line Speed) and NetGuru.


Doug Gale is president of Information Technology Associates, LLC (www.it associates.org) an IT consultancy specializing in higher education. He has more than 30 years of experience in higher education as a faculty member, CIO, and research administrator.

Cite this Site

Doug Gale, "Firewalls: A Hammer in Search of a Nail," Campus Technology, 5/29/2008, http://www.campustechnology.com/article.aspx?aid=62946

copy text (above) for proper citation



Recommended Reading
  • Tufts Grants Rights for Mileage-Increasing Transportation Technology to Electric Truck

    Tufts University has optioned rights to a technology that can recharge the batteries of any hybrid electric and electric-powered vehicle while it is driven. The Tufts-developed technology could increase by 20 percent to 70 percent the miles per gallon or total driving range performance of vehicles like the Honda Civic, Ford Escape, and Toyota Prius hybrids and the Tesla Motors and Phoenix Motorcars electric vehicles.

  • U Florida and Cyntellect Collaborate to Unlock Mysteries of Cancer Stem Cells

    The University of Florida has entered into a research agreement with life sciences company Cyntellect. The university's Interdisciplinary Center for Biotechnology Research will work with the company to focus on a variety of research areas including the purification and analysis of cancer stem cells (CSCs), rare cells believed to be directly involved in propagating cancers.

  • George Mason U Receives Grant To Deploy Intergraph Apps for Intelligence Curriculum

    George Mason University (GMU) in Fairfax, VA has been awarded a grant from Intergraph to enable students enrolled in GMU's Geospatial Intelligence Graduate Certificate program to use the company's geospatial production and exploitation software as part of their core curriculum.

  • George Mason U Receives Grant To Deploy Intergraph Apps for Intelligence Curriculum

    George Mason University (GMU) in Fairfax, VA has been awarded a grant from Intergraph to enable students enrolled in GMU's Geospatial Intelligence Graduate Certificate program to use the company's geospatial production and exploitation software as part of their core curriculum.

  • Institute for Cyber Security at U Texas, San Antonio Opens Incubator

    The University of Texas at San Antonio (UTSA) Institute for Cyber Security (ICS) has launched a new Internet security incubator. The incubator was developed to commercialize promising technologies that address major cyber security and privacy issues. The first companies to enter the incubator are Denim Labs and SafeMashups.

  • ISO/IEC Publishes Office Open XML Standard

    ISO/IEC has published the Office Open XML (OOXML) file format standard, formally known as ISO/IEC 29500:2008. It describes file formats originally designed by Microsoft for its Office 2007 productivity suite, which are used in presentation, spreadsheet and word processing applications.