Re: ADSL + Firwall for Small Business

From: Zordon (sss_at_aaa.com)
Date: 11/28/04 

Date: Sun, 28 Nov 2004 09:27:15 GMT

Thanks.

I dont think they realised how bad the security was, and did not realise
they bloke who set up the wireless access point left it open, Current plan
is to remove the ADSL card, install a Zyxel Prestige 652H, And then
reconfigure the WAP as this supports 256-bit WEP encryption.

Unless anyone has any other suggestions.

"Leythos" <void@nowhere.org> wrote in message
news:MPG.1c118b59c2ac2eb5989b1b@news-server.columbus.rr.com...
> In article <R8Mpd.196$sK4.108@newsfe3-win.ntli.net>, sss@aaa.com says...
>> A small business I am dealing with have the following setup.
>>
>> Windows 2000 Domain Controller, also running SQL server for a customer
>> database.
>> This server has a PCI ADSL adapter on the server with ICS enabled, and a
>> NIC
>
> If you want security then this has to change - remove the ADSL adapter,
> install an appliance that does PPOE authentication, and you will have
> many options.
>
>> wired to a 4 port switch, on another port is a wireless access point. 10
>> other computers have wireless cards no wired network is in use. Also no
>> encryption is used for the wireless setup. Wireless network runs at
>> 22mbps.
>
> What's the point of installing a firewall if you don't secure the
> wireless, if they don't value the network then why bother protecting it?
>
>> The company is looking for something that would allow for the following.
>>
>> Each PC will access POP3 and SMTP server from the ISP, and web.
>> Possible VPN solution for remote management of server.
>> Good degree of firewall protection.
>
> You have several options once you get the DSL card out of the server and
> onto a device.
>
> Since you don't care about security (as exampled by the completely open
> wireless network) you could use a simple NAT Router to provide all of
> what you want. The router, many of them, support inbound PPTP sessions,
> so you could allow users to VPN (PPTP) into the server from anywhere at
> any time and manage it through their user accounts. A cheap D-Link DI-
> 804HV unit supports inbound PPTP sessions (even directly to the unit)
> and runs about $59 in most places: http://www.dlink.com/products/?pid=59
>
>> It would also be handy if the company could still use the original
>> wireless
>> access point as this supports 22mps
>
> They can use a WAP with any network layout, since it's an access point
> you only need to change the subnet to match that of the network and
> you're in.
>
> Keep in mind, anyone in range can also (already) use this same network,
> you need to secure it.
>
> --
> --
> spamfree999@rrohio.com
> (Remove 999 to reply to me)

Relevant Pages

  • RE: Wireless Audit Cost
    ... "complete analysis" - to me this means that a full audit of both ... the wired and wireless networks is taking place. ... network off the internal LAN. ... >network has the usual security measures in place, ...
    (Pen-Test)
  • Re: Wireless security question...
    ... > related to wireless security. ... to the computer on that network that's a little different, ... Can this hacker take control of the wireless laptop? ... but it depends on the security running on said laptop..if they have ...
    (Security-Basics)
  • Re: Wireless Network Issue - SBS2K3 - Configuration and / or Topol
    ... I am quietly confident that moving the SBS to ... and the SBS is the DHCP/DNS server - but everything else in my house is ... wireless and it works fine. ... cause is incorrect network configuration and / or hardware topology. ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem with ISA, I think ...
    ... wireless access to the LAN (on my end I'd join the computer to the domain ... An additional Network card in the server will also be required for the ... Guest VLAN, and ISA 2004 needs to be installed on the Server, which I ... Antenna Guide at D-Link shows that the antenna below will work with the ...
    (microsoft.public.windows.server.sbs)
  • Re: Wi-Fi: Essential Checklist
    ... I prefer, and heartily recommend, regardless of wireless encryption, ... the most basic and easist form of security, which in this case is WPA. ... Is it access to the network? ... will protect your network from sniffing. ...
    (alt.internet.wireless)
Loading