Re: Zone Based firewall comment

+1, Chris.

-Raghav

On Sun, Feb 27, 2011 at 10:44 PM, Chris Proctor <chris_at_cwproctor.net> wrote:

> Well, after beating my head against this for awhile I have come to three
> conclusions (call it venting if you will):
> 1.) Security zones are cool
> 2.) Inspect maps are overly complex pieces of crap
> 3.) Specialized inspect maps are even bigger pieces of crap
>
> I find myself hoping they won't get too carried away with this subject.
> Working out all of the possible regex's, etc and nesting of relationships
> could easily take me 20 hours for a complex enough configuration. Can
> anyone tell me if I'm wasting my time going through the lower levels of hell
> here?
>
> --
> Chris Proctor
>
>
> --
> This message was scanned by ESVA and is believed to be clean.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Warm Regards
Raghav
Blogs and organic groups at http://www.ccie.net