Re: Firewalls purchase research

From: Phillip Windell (pwindell@wandtv.com)
Date: 03/26/03 

From: "Phillip Windell" <pwindell@wandtv.com>
Date: Wed, 26 Mar 2003 16:48:28 -0600

Hardware based FWs also aren't as flexible with user-based security and
usually depend instead on the users IP#,...which is worthless if you run
DHCP. Typically they are nothing more than NAT Servers in a Box with packet
filtering. We run one and it appears that it will work with user accounts
only if the account is created locally on the box that has the same matching
name and password,...which is worthless if user periodically changes
passwords as they should and the Admin wouldn't know the password to use it
on the FW Box. Ours can read the accounts from a Windows DC, but at this
point it isn't clear to me how it is supposed to use that information for
"intergrated authentication", and I'm not interested enough in it to worry
about it right now.

So I use the Firewall for some things and the Proxy for other things. They
are independent and neither depends on the other. One can go down while the
other keeps going.

There's my 2 cents Fred, so now your up to 4 cents. :) 

--
Phillip Windell
pwindell@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com
"Fred Baumhardt [MSFT]" <fredbaum@microsoft.com> wrote in message
news:eI2k0km8CHA.2284@TK2MSFTNGP12.phx.gbl...
> The following is not personal at all or directed at you in any way - but
> here goes.....

Relevant Pages

  • Re: DNS Server Refuses Updates from DHCP
    ... Have you assigned a user account with a non-expiring password in the DHCP ... scope properties for the DHCP server to authenticate with the DNS server? ... I really hate to run services as domain accounts, ... accounts and passwords and use them for further attacks. ...
    (microsoft.public.windows.server.dns)
  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.security)
  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.win2000.security)
  • RE: Security Logging - Passwords & Accounts
    ... Security Logging - Passwords & Accounts ... Does anybody know of any way to log changes to user & group accounts and ...
    (RedHat)
  • Antivirus programs for XP - best ones?
    ... DON'T create user accounts during setup as they will become ... Turn of transmission of passwords and user credentials in clear ... Keep your system and ALL installed applications uptodate (Microsoft ...
    (alt.computer.security)
Quantcast