At 16:46 02/09/96 -0700, Bill Stout <bill .
stout @
hidata .
com> wrote:
>Hmm. An OLE Proxy via Catapult only. Next all other firewall vendors
>will have to play catch-up with Microsoft.
>
Given the power of OLE and its near total lack of even elementary integrity
checking let alone security checking, OLE is one of the last services anyone
should allow through a Firewall with or without proxies.
(If you want a VPN, you can use a general NetBUI encrypted tunnel so don't
need proxies.)
I think that the trend towards increasing programmable features
(e.g. Word/Excel macros, Java/Active-X etc.) is wholly incompatible with
achieving secure networks. Regretably I fear this won't be appreciated by
a lot non-technical managers until lots of real damage has been done.
Ian
|
|
