Are there any security hazards the administrator should be aware of when using FireWall-1?
FireWall-1 provides transparent connectivity to all Internet resources. Some client-server implementations may pose security hazards, e.g., older versions of sendmail. The administrator should ensure that any application is safe to use before authorizing its use through a firewall. Since FireWall-1 enables the administrator to authorize any application, he or she has to carefully examine each one and assess the risk of allowing the use of that particular application (client or server). Unregistered IP Addresses FireWall-1 enables using a large number of unregistered or concealed internal IP addresses by presenting on external traffic only a small number of registered IP addresses. FireWall-1’s Address Translation feature enables a network to use unregistered Internet addresses or to hide the internal IP addresses.
