NAI公司日前宣布,其在防火墙技术中已经取得了明显突破,可望结束长期以来在选择防火墙时安全性和速度不可兼得的况状。正在申请专利的新防火墙技术具有“自适应代理”特性,不仅能够维护高安全标准的代理防火墙,还能够动态“适应”传送中的分组流量,从而明显改善了防火墙性能。新技术于本月在Ganuntlet Firewall 3.0 for Windows NT中面市,并将在今年晚些时候广泛用于所有Unix和NT版Ganuntlet防火墙上。由于经过防火墙的所有数据都在协议堆栈的最高层——应用层进行检查,应用代理防火墙能够全面掌握每个试图连接的情况。代理防火墙要优于分组状态检查防火墙,因为作为所有授权连接的“代理”,不允许信任的网络和不信任的网络之间相联系。尽管这些方法提供了安全性,但额外的安 NAI Inc. announced that it has made significant breakthroughs in firewall technology and is expected to end the longstanding security and speed-long process of choosing a firewall. The patent-pending new firewall technology has “adaptive proxy” features that significantly improve firewall performance by not only maintaining a high-security proxy firewall but also dynamically “adapting” for packet traffic in transit. The new technology debuted this month in Ganntlet Firewall 3.0 for Windows NT and will be widely available later this year on all of the Unix and NT Ganntlet firewalls. Since all data passing through the firewall is examined at the highest layer of the protocol stack, the application layer, the application proxy firewall has full visibility of every attempt to connect. Proxy firewalls outperform packet inspection firewalls because, as an “agent” of all authorized connections, there is no association between trusted networks and untrusted networks. Although these methods provide safety, extra safety