That is an interesting question, isn’t it? I have seen a majority of companies and clients of my put in a firewall and take a set it and forget approach. I have news for you that are not a good practice these days.
Most applications are configured to find the open ports in a firewall; this port is port 80, which is what most websites are running on. Programs such as Instant Messenger can use port 80 as do various other programs. Also with web 2.0 more and more applications are running port 80. Applications such as gotomypc and logmein remote are examples of applications that use port 80 and are not always welcome in the enterprise and could cause security violations
SSH which uses port 22 is used for administrative purchase, also have uses that are less than the up and up. Some smart and savvy end user can use SSH to bypass web filtering or can be used to bypass firewall rules.
Security is one of my favorite topics and I am always looking for a technical edge to give to my clients and me. I think I have discovered it with the Palo Alto firewall. The Palo Alto firewall takes a different approach to things. Instead of just focusing on ports, it focuses on applications. It has the ability to identify applications based on an application id. Why is this so important? Instead of relying on ports to block applications, you can use the ID to block the application. This will make the firewall administration much easier and you network better secured.
This firewall can also allow outbound Internet access via username and password and integrates with Active Directory and LDAP.
I went to Palo Alto SE training in November and we now have a 2050 demo unit. If you would like to schedule a demo or find out more about this firewall, call the office at 414-455-0719 or email me at james@jsotechnology.com