opportunistic routers?

 Eric,

    Yes, I agree the management channel may be
 the weakess channel, but that could be for any device.
 As we make either a router or firewall more dynamic,
 tradeoffs wil occur, espically when it comes to dynamic
 vs. static management and the number of management
 interfaces to the device, and that may be where a problem
 could occur.
 I don't think routers protect a firewall or replace a
 firewall, but rather add to its functionality. I
 personnaly don't have any bias one way or the other,
 just from an historical  prospective. As of now, they
 are talking about redoing IPSec to add another encryption
 algorithm as its default other than 3DES or DESX, or even
 wait for AES, which may be a while, since if DES is ever
 hacked, these two also may be comprimised,  which may
 make for some very interesting new products.

Thanks



Steven A. Brown, MBA., CCSA, CCSE,
VPN/Firewall & Internet Security Engineer
Cable&Wireless, 6400 Weston Pkwy, 3rd. FL
Research Triangle Park, NC, 27513
Author:Implementing Virtual Private Networks, McGraw-Hill
CoAuthor:CheckPoint Firewall-1, McGraw-Hill
sbrown at cw.net, Steven.Brown at cwusa.com
>

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************




****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************