HP IPFilter Questionaire

[HP IPFilter IPSec Team]

In an effort to better meet your needs, HP would like to get your feedback on the IPFilter product. We would appreciate a few minutes of your time to address the following questions:
- How do you currently use or plan to use
IPFilter (e.g. business context, why are
you protecting the system)?

- If you are currently using IPFilter, what
are your thoughts on the product?
(usability, documentation, support, features)

- Do you have any enhancements that you would
like to have incorporated into IPFilter?
(Please assign a priority if possible).

Thank You for your Time,
HP IPFilter Team
You may respond via HP-only email to:
hp-ipfilter-ipsec@hpuxmail.cup.hp.com

[Steven Sim Kok Leong · Accepted solution]

Hi,

> How do you currently use or plan to use
IPFilter (e.g. business context, why are
you protecting the system)?

To further protect critical and sensitive database servers, i.e. defense in depth.

> Do you have any enhancements that you would
like to have incorporated into IPFilter?
(Please assign a priority if possible).

Can we have it on HP-UX 11.20 developtment release as well? I only have HP-UX 11.20 on the itanium testbed so I can't test IPFilter on it.

Hope this helps. Regards.

Steven Sim Kok Leong

[Christian Gebhardt]

- How do you currently use or plan to use IPFilter (e.g. business context, why are you protecting the system)?

We use BCV from EMC, so we can split databases for integrationtests, performancetests, ...
The databases on the splitted systems have the same SID, tnsnames.ora, ... , so it is easy to connect to the productiv system inadvertently. We have installed IPFilter on the testsystem in order to protect our productive system against us.

- If you are currently using IPFilter, what
are your thoughts on the product?
(usability, documentation, support, features)

For our purpose the ideal tool, easy to configure.

- Do you have any enhancements that you would
like to have incorporated into IPFilter?
(Please assign a priority if possible).

Not yet

Chris

[Wodisch]

Hi,

- to secure OVO servers (and NNM and actually almost all of them - well, if permitted by the customer)
- like it
- haven't even tried yet, but how about the "bridging firewall" add-ons as available on OpenBSD?

Thanks,
Wodisch