|
05/25/2005, 11:45 AM - 12:45 PM
Speaker:
Michael Rash, Security Research Engineer, Enterasys.
This talk will make the case that Netfilter is ready for serious deployment within the Enterprise. Netfilter has matured over the years, and now provides many features that rival large commerical firewall offerings. Netfilter is stateful, provides complete Network Address Translation (NAT) capabilities, and generates extensive logs detailed enough for use as a supplement to intrusion detection systems. As a sign of its maturity, Netfilter is now enabled by default in the Linux 2.6 kernel series. This talk will concentrate on features, management, and deployment of Netfilter in medium to large-scale networks.
|
