Jay Vassos-Libove writes:
> Do any of you folks have suggestions for a particular firewall
> product/service for a company which deliberately has no security
> inside its own borders, and wants to remain that way, but also wants
> to have access to the outside network?
check the archive for discussions of the "crunchy shell, soft insides"
model.
Basically, your users want to get to the net from inside, this can be
achieved with a socks host.
If you simply do not allow remote access, especially from the internet
(block ports with a router), you've just saved yourself a huge amount
of security work. (Use dedicated lines for remote access (dial back
if you're cheap).)
--eric
References:
|
|
