Thank you for your answer.I am no security specialist, but the "single TCP socket" seems a rather crude solution to me, esp. since Radware Defense prides itself to protect against high frequency flooding attacks. I cannot imagine that it does so by funneling all connections through a single socket and thus reducing network speed to a crawl. Also what are the chances that the management station gets subverted? Isn't that within a safe zone?
CountZero A program should be light and agile, its subroutines connected like a string of pearls. The spirit and intent of the program should be retained throughout. There should be neither too little or too much, neither needless loops nor useless variables, neither lack of structure nor overwhelming rigidity." - The Tao of Programming, 4.1 - Geoffrey James
| [reply] |