Re: Microsoft worm affecting Automatic Teller Machines

From: Anne & Lynn Wheeler (lynn@garlic.com)
Date: 01/29/03 

From: Anne & Lynn Wheeler <lynn@garlic.com>
Date: Wed, 29 Jan 2003 17:30:40 GMT

n1pop@hotmail.com writes:
> But using secure technologies like VPN will allow companies like us to
> direct much of the dedicated line traffic over the internet and help
> to reduce costs. Obviously, those technologies must also consider the
> possibility of a net-wide traffic jam and offer immediately-available
> workarounds.

when my wife & i were working on the original (e-commerce) payment
gateway .... there were a whole bunch of issues regarding what you
would expect from a normal telco financial transaction link.

1) sla (service level agreement) ... contractual service levels with
significant penalty clauses if the SLA was not met

2) end-to-end diagnostic & problem resolution capability. little
things like less than 5 minute elapsed time for first level problem
determination (early on had traditional internet problem that involved
3hr manual diagnostic and the trouble ticket was closed NTF ... no
trouble found). we did a draft manual & some bits & pieces of software
to try and map normal business diagnostic & resolution procedures into
a internet environment.

3) fault tolerant, no-single-point-of-failue, diverse routing, etc

4) did use SSL for encryption but had to force implementation for both
client & server end authentication (which hadn't been done yet).
Somewhat aside a friend of ours introduced VPN at router committee
meeting at the fall '94 IETF meeting ... prior to that ipsec was
heavy-weight end-to-end encryption/security. there was initially some
comflicts between the light-weight (would come to be called VPN) and
the heavy-weight solutions.

slightly related:
http://www.garlic.com/~lynn/aadsmore.htm#dctriv Digital Commerce Trivia Question
http://www.garlic.com/~lynn/aadsm5.htm#asrn1 Assurance, e-commerce, and some x9.59 ... fyi
http://www.garlic.com/~lynn/aadsm5.htm#asrn2 Assurance, e-commerce, and some x9.59 ... fyi
http://www.garlic.com/~lynn/aadsm5.htm#asrn3 Assurance, e-commerce, and some x9.59 ... fyi
http://www.garlic.com/~lynn/aadsm5.htm#asrn4 assurance, X9.59, etc

also:
http://www.garlic.com/~lynn/subpubkey.htm#fraud Risk, Fraud, Exploits
http://www.garlic.com/~lynn/subpubkey.htm#assurance Assurance

trivia question .... who introduced light-weight stuff at fall '94
IETF meeting? 

-- 
Anne & Lynn Wheeler | http://www.garlic.com/~lynn/ 
Internet trivia 20th anv http://www.garlic.com/~lynn/rfcietff.htm

Relevant Pages

  • RE: Missing web services configuration pane
    ... Please contact the ISP to confirm what the exact connection type is. ... If it's a VPN type, you should have the VPN server side address. ... 825763 How to configure Internet access in Windows Small Business Server ... 241252 VPN Tunnels - PPTP Protocol Packet Description and Use ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Issue
    ... 317025 You Cannot Connect to the Internet After You Connect to a VPN Server ... | first done with a standard usb broadband modem on XP Professional. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Error code 800 HELP!
    ... Can you visit Internet and OWA on SBS server? ... Just one PC get error code 800 connecting VPN connecting to SBS? ...
    (microsoft.public.windows.server.sbs)
  • Re: CAN WE LOGIN TO A WINDOWS 2003 ACTIVE DIRECTORY DOMAIN OVER TH
    ... I have only heard about VPN and never tried it. ... drive and access it through the internet after you established VPN connection? ... We can do VPN in windows xp to windows xp machine right and it does not have ... Logging onto a server is not nearly as serious as logging ...
    (microsoft.public.windows.server.active_directory)
  • Re: Http access across a site 2 site VPN
    ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ... Microsoft Internet Security & Acceleration Server: ... access rule that represents access to the vpn between the sites. ... corresponding network rules and access rules, and I went ahead and created ...
    (microsoft.public.isa)