Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I came across this when I was reading a book on proxy servers yesterday. Can you explain me why ?

The "Default Deny" stance is much safer to implement on a proxy server rather than a "Default Permit" yet managers and users still prefer to implement the "Default Permit" stance.

share|improve this question
up vote 0 down vote accepted

Well the answer to that actually links convenience and security together. Corporates prefer to use "Default Permit" to ease on log file sizes and improve better traffic flow which normal users might complain if their internet traffic gets limited.

However if you are talking about security companies, banks or government agencies, they will definitely need deny most traffic for safety reasons such as malware, social engineering and other more.

Therefore to answer your question it would be due to large amount of users and traffic utilizing the proxy which corporates might incur huge costs if limiting traffic for both business and technical reasons.

There are quotes and explanation like "For example, every user input field in every single page of the application needs to be properly described to the application firewall in terms such as maximum field size, allowable data types/values, unallowable data types, etc. This drawback is exacerbated if the application firewall is “default deny.”" - Taken from

That website seems pretty useful so have a look at it.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .