Great Circle Associates Firewalls
(December 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: need suggestions
From: shiggins @ naccess . com (Sean higgins)
Date: Sun, 29 Dec 1996 18:57:54 GMT
To: <Firewalls-Digest @ GreatCircle . COM>
In-reply-to: <19961229170836052 . AAA142 @ keith . acsinc . net>
References: <19961229170836052 . AAA142 @ keith . acsinc . net>

On Sun, 29 Dec 1996 13:05:24 -0500, you wrote:

>My company has a T1 to the Internet and a client that wants a T1 from their
>building to us so they can provide Internet access for their entire company
>which is on a frame relay wan. The client wants an Internet firewall, but
>physically at our location. I've been telling my boss it needs to be at
>their location (they already have purchased a Cisco router to use at their
>location) so all we would need is another CSU here and connect to the
>second port on our Cisco then put a bastion inside their Cisco. Otherwise -
>if we build it here we would need to add some kind of bridge or switch to
>make their segment (another Cisco) then the bastion but then how to go from
>the bastion to the CSU? and besides the screening function of the Cisco at
>their end would end up unused. Am I thinking about this clearly? Or am I
>confusing myself.

If you have a router to the Internet, and they connect via T1 to that
router as well, then the Firewall needs to be at their location
between them and their router...

                       Sean

Sean Higgins -- "Always count your advantages!"


Follow-Ups:
References:
Indexed By Date Previous: Re: fw1/address translation
From: shiggins @ naccess . com (Sean higgins)
Next: [no subject]
From: Donald . J . Smith @ cdev . com (Donald J Smith)
Indexed By Thread Previous: need suggestions
From: keithstevens @ acsinc . net (Keith Stevens)
Next: Re: need suggestions
From: "Donald R. Guillot" <dguill @ communique . net>

Google
 
Search Internet Search www.greatcircle.com