Re: Too many firewalls?

From: Duane Arnold (notme_at_notme.com)
Date: 11/15/05

  • Next message: Mikaelski: "personal firewall suggestions"
    Date: Tue, 15 Nov 2005 02:22:54 GMT
    
    

    "???" <Chu.Sue@gmail.com> wrote in news:1132007716.120924.116690
    @g43g2000cwa.googlegroups.com:

    > Hi Duane
    > thanks for your advice..I also had a look around about some of the
    > problems that i mentioned here earlier, and found out a few things:-
    > My network was setup correctly, but because i dont have a dns server, i
    > can't see it on my network places. i read that netbius should help. in
    > addition, i also read that other people also have similar problems not
    > seeing other pc in the workgroup.however, some of them got it work by
    > restarting, or by mapping the other pc using ip address, then only it
    > shows up.

    If you just had the PIX 501 connected to the modem and nothing else, no
    router -- no nothing else in the way, your network would be fine. The PIX
    501 would use the ISP's DNS servers, the machines connected to the PIX,
    would get their IP(s) from the DHCP server on the PIX and all machines
    connected to the PIX would be able to share resources with each other
    with no problems. And even if you connected a standalone hub or swicth to
    a LAN port on the PIX to extend the LAN and connected machines to the hub
    or switch, all the machines using the PIX as the gateway device for the
    WAN or LAN would have no problems --- none.
     
    >
    > i'm having mix responses about this fire wall- some said the network is
    > too small- only 3/ 4 people, and all of them already have the norton
    > thing.

    That PIX 501 out-classes any personal FW solution running on the machines
    by a long distance. The PIX 501 is a network FW solution and Norton is a
    personal FW solution running at the machine level (running on the machine
    protecting the machine). They are not the same thing. And the Norton PFW
    can be circumvented and defeated by malware easily. That PIX 501 out-
    clasess any NAT router you have sitting there.

    One doesn't use a personal FW in business situation to protect a machine
    or machines. One just does not do that. One really doesn't use a NAT
    router to protect a business situation either.

    So what that there are three or four machines that the PIX is protecting,
    you should be using that PIX 501 to protect the *network* in a business
    situation and not some NAT router/Norton PFW solutions.

    However, if it will ease some minds, then use Norton on the machines
    behind the PIX. But the reality is that PIX sitting there protecting the
    network, Norton is not needed.

    > they themselves also spoke to a few people, and it looks like
    > they might want to sell it on ebay now.

    They don't know what they have then and don't know how to use the PIX 501
    due to their ignorance.
     
    >
    > basically, i was wondering why bt put in 4 ports/ sockets on the wall,
    > i thought they will only put in 1 line, and connect router/ swich from
    > there. that's why i was wondering whether i can use the other socket/
    > port to connect to another pc. however, as soon as i connect a router
    > on the other socket, it crashed the original router.

    I don't know either. And maybe it's best that you just leave it alone.

    What does a *Internet/network* FW do?

    http://www.firewall-software.com/firewall_faqs/what_does_firewall_do.html

    http://www.more.net/technical/netserv/tcpip/firewalls/

    The PIX 501 is a network FW solution and out classes any personal FW
    solution.

    Your users or whomever your getting your information from as to what to
    do are ignorant as to what should be done.

    Duane :)


  • Next message: Mikaelski: "personal firewall suggestions"

    Relevant Pages

    • general vlan questions
      ... PIX 506 at 6.3. ... I am curious about VLANS (I'm not a network admin, ... a DMZ subnet, a wireless subnet, and a subnet for a group ... I do not want the guest machines to ever reach the inside ...
      (comp.dcom.sys.cisco)
    • Re: Connecting a branch office...HELP
      ... As far as the network addresses are concerned, it depends on how you set ... up the connection. ... the PIX unless you connect the T1 through the PIX (because the LAN machines ...
      (microsoft.public.windows.server.networking)
    • Re: Too many firewalls?
      ... You should get rid of everything else and just use the PIX that is a FW ... > connect to the router. ... > the 'network' although they are all on the same workgroup. ... personal FWon the machines as I don't think you know how to configure ...
      (comp.security.firewalls)
    • Having 2 networks behind a PIX
      ... I have a PIX and 2 logical networks on the inside interface. ... The first network hangs directly off the inside interface, ... has a default gateway pointing to A1 and all the machines on B has default ...
      (comp.security.firewalls)
    • Re: Can find Vista box, cant share folders or printers.
      ... When I click 'Network' on the laptop the ... I've disabled Norton and Windows firewall entirely to make sure that's not ... public folder sharing - on ... start by running the Network Setup Wizard on all machines (see ...
      (microsoft.public.windows.vista.networking_sharing)