Re: [fw-wiz] Isolating internal servers behind firewalls
- From: dlang@xxxxxxxxxxxxx
- Date: Mon, 10 Sep 2007 14:03:53 -0700 (PDT)
On Mon, 10 Sep 2007, ArkanoiD wrote:
I am yet to see a firewall capable of intelligent SMB filtering.
Quite simple requirement (say, allow file sharing and deny other potentilly
dangerous rpc's) and nobody meets it. Except maybe Solsoft NSM which is
rather dead than alive.
the raptor firewall would do this, by symantec has just about killed it off
(they are down to only their appliance version)
I think the sidewinder firewall has some capabilities in this area as well, but
I haven't dug into it yet.
David Lang
On Mon, Sep 10, 2007 at 08:09:17AM -0500, Behm, Jeffrey L. wrote:_______________________________________________
How many new exploits come in via chargen nowadays, which you could
block vs. how many come in via Microsoft networking (Ports 445, 137,
139, etc.), which you would have open, if you want file shares to work.
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
- References:
- [fw-wiz] Isolating internal servers behind firewalls
- From: Dan Lynch
- Re: [fw-wiz] Isolating internal servers behind firewalls
- From: ArkanoiD
- [fw-wiz] Isolating internal servers behind firewalls
- Prev by Date: Re: [fw-wiz] Do you permit X11 via proxy firewall?
- Next by Date: Re: [fw-wiz] Isolating internal servers behind firewalls
- Previous by thread: Re: [fw-wiz] Isolating internal servers behind firewalls
- Next by thread: Re: [fw-wiz] Isolating internal servers behind firewalls
- Index(es):
Relevant Pages
|