Re: Advise: protect LAN from two non-trusted networks

From: ELE OLO (dingtan_at_eleolo.com)
Date: 09/30/03 

Date: 30 Sep 2003 08:15:43 -0700

Hi, Bob,

I think that the NetScreen 200 series products, and I think also the
NS-25/50 products [with the Screen0S 3.1 or later - labelled as E1-E4]
 have the flexibility built in for you to configure multiple UNTRUST
interfaces into
ONE single appliance.

I think prior to OS 3.1, only ports 1-3 are active for NS-25 .

Dean, NCSA,CCSA,SANS GSEC,EIT

"Bob Walker" <r042wal@no.spam.sympatico.ca> wrote in message news:<eE4eb.525$r.226144@news20.bellglobal.com>...
> I am working on a project that involves merging a Federal network with a
> local police LAN. Before the Federal network will merge, the local LAN has
> to be secured with an EAL4 rated firewall appliance.
>
> The local police LAN is only 8 workstations. The LAN is connected to the
> Internet with a router. The LAN is also connected to the Provincial network
> which is also not secure. I have to secure this network before the federal
> network is merged and I don't have a lot of money at my disposal.
>
> I would like to use Netscreen appliances such as the 5XP, but near as I can
> determine, I am going to need an appliance to protect the LAN from the
> Internet and an appliance to protect the LAN from the Provincial network.
>
> Some police agencies have used CISC PIX 500 series appliances, and it has
> also been suggested that I consider an appliance with two untrusted
> interfaces although I have not found any.
>
> I am open to any suggestions.
>
> TIA

Relevant Pages