>
> I would expect as companies become more strict in implementing blocking of
> specific web pages and services that this sort of covert proxy will become
> increasingly common.
>
Assuming the knowledgeable user has access outside to support
the far end, most things can be tunnelled through this way, Heck I've
done similar things, and watched them being done. You need a security
policy that is sanctioned from the top. A java block is to
(presumably) enforce a security policy statement that says "Don't do
this and this is why", as opposed to the security policy being
"Whatever the firewall doesn't block is O.K.".
The difference between the two being if you do the above with
proper policy in place, the user is disciplined/fired/etc. Without it
it just becomes a game to the users.
-Bob
---------------------------------------------------------------------------
Bob Beck Obtuse Systems Corporation
beck @
obtuse .
com http://www.obtuse.com/
"Duct tape is like the force. It has a light side, and a dark side, and
it holds the universe together"
References:
|
|
