RE: [fw-wiz] Strange setup

From: Daniel Linder (dan_at_linder.org)
Date: 02/27/04

  • Next message: Sloane, David: "RE: [fw-wiz] Strange setup" 
    To: mcary@badgermeter.com
Date: Fri, 27 Feb 2004 12:48:22 -0600 (CST)

    mcary@badgermeter.com said:
    > What prevents a user from changing his default route from ISA to the FW,
    > bypassing any authentication that ISA provided?

    The firewall rules themselves...? If this were my network to administer
    (but not reorganize), I'd restrict access directly through the fireall to
    only the servers that need it (ISA, e-mail, web, ftp, MS-SQL, NetBIOS,
    etc). (Just kidding on those last two! Please, no flames! :)

    Dan
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Sloane, David: "RE: [fw-wiz] Strange setup"

    Relevant Pages

    • Re: Best Practice for Using MVPS HOSTS File on ISA Server?
      ... Surely ISA doesn't store the firewall rules in a human-readable form. ... target site in the hosts file to a unique IP that is an internal web server. ...
      (microsoft.public.isa)
    • Re: Best Practice for Using MVPS HOSTS File on ISA Server?
      ... Surely ISA doesn't store the firewall rules in a human-readable form. ... target site in the hosts file to a unique IP that is an internal web server. ...
      (microsoft.public.isa)
    • Re: Best Practice for Using MVPS HOSTS File on ISA Server?
      ... Jim Harrison ... Surely ISA doesn't store the firewall rules in a human-readable form. ... between the hosts file usage and the ISA rules. ...
      (microsoft.public.isa)
    • Re: Best Practice for Using MVPS HOSTS File on ISA Server?
      ... Jim Harrison (ISA SE) ... Surely ISA doesn't store the firewall rules in a human-readable form. ... As long as you had as many unique target web server IPs as you do types of ... between the hosts file usage and the ISA rules. ...
      (microsoft.public.isa)
    • Re: isa 2004 on sbs premium
      ... result of running the CEICW is that some 20 firewall rules are configured. ... I've read that upgrading from ISA 2000 brings the rules over. ... things don't work you can always rerun the CEICW to set things back in order. ... >> component provided on the SP1 CD media to install. ...
      (microsoft.public.windows.server.sbs)