Great Circle Associates Firewalls
(January 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Dial-In placement
From: Matt Wallace <mwallace @ netcom . com>
Date: Wed, 22 Jan 1997 11:28:22 -0800 (PST)
To: firewalls @ GreatCircle . COM
In-reply-to: <32E57D21 . 37BA @ ncs . com . sg>


On Wed, 22 Jan 1997, Henry Lim Chee Wee wrote:

> Irwin Lazar wrote:
> > 
> > I think I missed a discussion about this a few weeks ago, but can anyone
> > offer any suggestions on whether it is better to place a dial-in server
> > inside or outside of the firewall?
> > The dial-in server would be restricted to employees (hopefully :-) )
> 
> put it on the DMZ segment. Add data encryption and call-back
> verification. 

It depends on your firewall. If you can set it up to do call back, then I 
would place it inside the firewall in most circumstances. With a gateway
application firewall, you'll almost certainly appreciate the dialups on the
inside.

-Matt


References:
Indexed By Date Previous: Security/Firewall Training
From: MARK . ELIAS @ x400gw . ameritech . com
Next: [FW1] inside and outside ports in the same network??
From: Mark Thompson <thommd @ CETUS . MNGT . ULETH . CA>
Indexed By Thread Previous: Re: Dial-In placement
From: Henry Lim Chee Wee <cwlim @ ncs . com . sg>
Next: Re: Dial-In placement
From: wiseleo @ juno . com (Leonid S Knyshov)

Google
 
Search Internet Search www.greatcircle.com