Re: Remote Users
From: dewt (dewt@kc.rr.com)Date: 08/12/01
- Previous message: Carder James O CNIN CONT: "Possible probe of port 137 using udp 50?????"
- In reply to: Gillard, Paul: "Remote Users"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: dewt <dewt@kc.rr.com> To: "Gillard, Paul" <paul.gillard@radioscape.com>, "'security-basics@securityfocus.com'" <security-basics@securityfocus.com> Subject: Re: Remote Users Date: Sun, 12 Aug 2001 10:50:53 -0500 Message-Id: <01081210505300.01308@monoceros.pretzel.myip.org>
On Friday 10 August 2001 03:33 am, Gillard, Paul wrote:
> Hi,
>
> I'm in the process of securing my companies network and have a query. As we
> are directly connected to the internet via a 2mb I have installed a
> firewall and allowed only SMTP & VPN in. I've also blocked netbios ports
> from going out. I've introduced a procedure of updating servers with the
> latest security patches as they are released. Virus's are taken care of by
> a virus & content scanner on the SMTP server and AV software on all PC's
> automatically updated as new virus's are found. Home based users have VPN
> connections from a hardware firewall on there ADSL connections with
> reporting sent to a log server on the central LAN. I think I'm reasonably
> well covered apart from one point :- I have a number of users (salesmen)
> who VPN into the main network via the firewall using dial-up connections
> (128 bit), AFAIK while these are connected to the internet they're
> available to any hacker. Am I being paranoid or is this a weak link, if so,
> what can I do to plug it?
>
I'd say you're pretty well set up, i would only recommend one thing, have the
virus scanner for the vpn users as well(if you're not already doing that),
your greatest risk appears to be a virus/trojan/whatever coming over that
from the home users' unclean machines. as for the vpn being weak, as long as
it's encrypted at all it's very unlikely a hacker would take the time to
bother with it from that angle (they'd have better luck taking on the
firewall)
- Previous message: Carder James O CNIN CONT: "Possible probe of port 137 using udp 50?????"
- In reply to: Gillard, Paul: "Remote Users"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
