Re: windows mapped drives

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/30/04


Date: Wed, 30 Jun 2004 00:22:06 GMT

There are always risks, though they can be minimized which it sounds like you have
done to a large part. Make sure that you are also using complex passwords for access
to the server as weak passwords are still one of the biggest threats to security.
Also keep in mind that the data you access over the mapped share may not be encrypted
on the wire. Ipsec in tunnel mode using certificates for authentication may be one
solution to that if it is an issue. --- Steve

"ksouth" <ksouth@doit.in.gov> wrote in message
news:22f4201c45de1$e62ead60$a501280a@phx.gbl...
> Hello. I have question concerning windows mapped drives.
> I have a setup that involves a privately addressed,
> internal windows host (10.x.x.x) mapping a drive to a
> windows server that resides off of a less-secure (but not
> the Internet) interface on a six-port firewall. Barring
> that the server is hardened and updated and the ACLs in
> the firewall allow the connection from the internal host
> to the server (stateful firewall) and not vice versa, are
> we opening up any risks in the direction from the server
> to the internal host because of the mapped drive? Thanks.
>
> - K



Relevant Pages

  • Re: ICMP Port and Symantec Enterprise Firewall (SEF) 6.5.2
    ... >We are running an NT4.0 server and network. ... The workstations are all W2K Pro ... But again, from the firewall box, everything functions. ... Raptor sends an ICMP host unreachable to any internal host that attempts ...
    (comp.security.firewalls)
  • Re: CEICW fails at firewall config
    ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Recycler security issues on IIS server
    ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISA SERVER NOT STARTING
    ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: For Microsoft Partners and Customers Who Cant Download or Access
    ... to reconfigure the firewall, but to use a static IP on your client ... and to make sure that the DNS server entries on the client are ... Microsoft for msdn2.microsoft.com. ... use a static IP and set the DNS server addresses to the DNS ...
    (microsoft.public.dotnet.general)