RE: Windows firewall scopes for notebook users ex office...
From: Jim Harrison (ISA) (jmharr_at_microsoft.com)
Date: 03/23/05
- Previous message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "Re: Windows firewall scopes for notebook users ex office..."
- Maybe in reply to: Murad Talukdar: "Windows firewall scopes for notebook users ex office..."
- Next in thread: Jeff Shawgo: "Re: Windows firewall scopes for notebook users ex office..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 22 Mar 2005 15:43:03 -0800 To: "Murad Talukdar" <talukdar_m@subway.com>, <focus-ms@securityfocus.com>
"Scope" is determined in the context of the current IP settings.
If the domain subnet is 10.9.8/24 and the home net is 123.123.123/24,
then the Windows Firewall adjusts to that and deals with traffic
according to basic subnetting rules.
It really doesn't matter what the subnet is; if the scope is defined as
"subnet", then all hosts in the current subnet are able to touch that
protocol/port.
Jim Harrison
Security Business Unit (ISA SE)
-----Original Message-----
From: Murad Talukdar [mailto:talukdar_m@subway.com]
Sent: Monday, March 21, 2005 11:33 PM
To: focus-ms@securityfocus.com
Subject: Windows firewall scopes for notebook users ex office...
Hi List,
When users with SP2 firewall enabled are out of the office, I understand
there is a difference between the domain settings and non domain
settings
but how does the firewall 'recognise' the boundaries of the scope?
What if scope is subnet and they simply connect to an identical
subnet?(Not
sure how likely that is) I think this would mean they are open on those
ports that I have set exceptions for.
Kind Regards
Murad Talukdar
------------------------------------------------------------------------
--- ------------------------------------------------------------------------ --- --------------------------------------------------------------------------- ---------------------------------------------------------------------------
- Previous message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "Re: Windows firewall scopes for notebook users ex office..."
- Maybe in reply to: Murad Talukdar: "Windows firewall scopes for notebook users ex office..."
- Next in thread: Jeff Shawgo: "Re: Windows firewall scopes for notebook users ex office..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
