Great Circle Associates Firewalls
(August 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: VMS security - more detailed question
From: "Comet" <COMET @ us . oracle . com>
Date: Mon, 8 Aug 94 14:54:03 PDT
To: firewalls @ greatcircle . com
Cc: jimc @ e-commerce . com

--Boundary-3131860-0-0

Well... it's good that you supplied more details. 
However, I'm still not sure what you want to find out! 
 
The firewalls list tells why firewalls are desirable-- 
this is in addition to any O/S dependencies, and holds 
true for all machines, including, of course, VMS. 
Firewalls are a Good Idea, and can do things that cannot be done without them. 
 
Alternative security for networks would included a hardware encryption device, 
and also using only authenticating protocols, while disabling the rest. 
 
Of course, this may not be viable, depending upon the use to which you want 
to have the network. 
 
You say you are "trying to alert" a company, whose sysadmin has 
a "false sense of security."  Well, how can the readers of the 
firewalls list help you?  What difficulties do you have that are 
keeping your from informing a company about security risks and 
vulnerabilities?  It seems that you don't trust the sysadmin's 
competence in securing the VAX machine--why?  What evidence do you 
have for your statement that his sense of security is "false"? 
 
What does it mean, to YOU, in *this* situation, for the computer to be 
"secure"? 
--------                       ____________  
Comet <comet @
 oracle .
 com>      /\  _________\   Oracle Corporation 
Senior Technical Analyst      \ \ \______  /   500 Oracle Parkway 
Electronic Support Group       \ \ \bi/ / /    Box 659313 
Worldwide Technical Support     \ \ \/ / /     Redwood Shores, CA  94065-5040 
                                 \ \/ / / 
                                  \  / / 
                                   \/_/ 


--Boundary-3131860-0-0
X-Orcl-Content-Type: message/rfc822

Received: 08 Aug 1994 14:42:04                    Sent: 08 Aug 1994 14:39:09
From:"Jim Carroll" <firewalls-owner @
 GreatCircle .
 COM>
To: firewalls @
 GreatCircle .
 COM
Subject: VMS security - more detailed question
Reply-to: jimc @
 e-Commerce .
 Com
X-Orcl-Application: Sender:  Firewalls-Owner @
 GreatCircle .
 COM
X-Orcl-Application: Precedence:  bulk


Okay folks.  My question seems to be getting a tad misconstrued,
possibly by the way I phrased it.

I'm not interested in the ol' VMS vs. Unix argument.  I'm only
interested in 'secure' VMS, in isolation.

The company I'm trying to alert has a sysadmin who is confident that
he's locked up his VMS host.  Yet, he's just now going through the
process of purchasing TCP/IP for it.  Since TCP/IP is somewhat
foreign/new to him, I'm concerned that he is building up a false sense
of security, esp. when you consider that they have *no* firewall to
speak of.

Comments?

-- 
Jim Carroll --  jimc @
 e-Commerce .
 Com
e-Commerce, Inc., 1030 Kamato Road, Suite 201
Mississauga, Ontario, Canada    L4W 4B6
Tel:  +1 905 602 0863    Fax:  +1 905 603 8402


--Boundary-3131860-0-0--

Indexed By Date Previous: Re: VMS security - more detailed question
From: "Selden E. Ball, Jr." <SEB @ LNS62 . LNS . CORNELL . EDU>
Next: Re: VMS security - more detailed question
From: D . Michael . Francis @ DREP . DND . Ca
Indexed By Thread Previous: Re: VMS security - more detailed question
From: "Selden E. Ball, Jr." <SEB @ LNS62 . LNS . CORNELL . EDU>
Next: Re: VMS invulnerability
From: "Comet" <COMET @ us . oracle . com>

Google
 
Search Internet Search www.greatcircle.com