RE: [fw-wiz] Worms, Air Gaps and Responsibility
From: Carson Gaspar (carson_at_taltos.org)
Date: 05/05/04
- Previous message: R. DuFresne: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- In reply to: Paul D. Robertson: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- Next in thread: Paul D. Robertson: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- Reply: Paul D. Robertson: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: firewall-wizards@honor.icsalabs.com Date: Wed, 05 May 2004 16:04:51 -0400
I can answer for the financials - the user desktops _are_ production. If
the homedir fileserver is compromised, you're in trouble, but you can't
isolate it from the desktops...
VPN is a fact of life given 24/7 trading, and the client desktops need to
access file servers. The best you can do is lock down the VPN clients, and
manage the hell out of them.
In many cases you can firewall your core back office data from everything
else. Some companies try to firewall by business unit, but the inter-BU
requirements quickly make those such swiss cheese that they're mostly
useful as emergency fire doors when an outbreak happens.
Doing firewall-on-a-nic for all desktops and servers is possible, but is
extremely expensive with current technology (mostly due to deployment and
support costs). Even firewalling each subnet is a support nightmare in the
dynamic environment that exists in most modern financials.
As for patching your servers, MS _still_ doesn't have a non-broken patch
for win2k. Most companies haven't upgraded to 2003 server yet, so a lot of
companies had patched XP desktops, but unpatched servers.
-- Carson _______________________________________________ firewall-wizards mailing list firewall-wizards@honor.icsalabs.com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
- Previous message: R. DuFresne: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- In reply to: Paul D. Robertson: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- Next in thread: Paul D. Robertson: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- Reply: Paul D. Robertson: "RE: [fw-wiz] Worms, Air Gaps and Responsibility"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
