Great Circle Associates Firewalls
(March 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: WinNT and C2
From: William Burrow <aa126 @ fan . nb . ca>
Date: Tue, 18 Mar 1997 22:47:43 -0400 (AST)
To: NetSurfer <netsurf @ pixi . com>
Cc: firewalls @ GreatCircle . COM
In-reply-to: <199703181545 . FAA15356 @ mail . pixi . com>

On Tue, 18 Mar 1997, NetSurfer wrote:

> 
> When I ran the C2 tool from the reskit, one of the items was having any
> network protocols on the machine.  If C2 disallows network protocols that
> would certainly block intrusions over the network.  Does C2 in fact
> prohibit network connections?

As was mentioned many times, ``Orange book'' precludes networks, ``Red 
Book'' covers networks.  This is pretty clear so far.

Perhaps it might not be clear to some why this would be.  In my mind, it 
would be due to the fact that at one time multi-user computers tended to 
sit in big, air-conditioned, locked rooms with many cables going out to 
terminals here and there (what might actually be not too far from the 
machine room).  The machine is not on a network.  

Today, the Internet, small computers and proliferation of LANs changes
that scene quite a bit. 

--
William Burrow  --  Fredericton Area Network, New Brunswick, Canada
Copyright 1997 William Burrow  
"Well, let's just say, 'if your VCR is still blinking 12:00, you don't
want Linux'". --Bruce Perens, Debian's Fearless Leader
** Those who send MAKE.MONEY.QUICK mail, should be sent to Albania. **



Follow-Ups:
References:
Indexed By Date Previous: On FW-1 and Hypercom's NMS protocol
From: drexx @ sunphil . mozcom . com (Dexter D. Laggui)
Next: Re: ident service
From: Adam Shostack <adam @ homeport . org>
Indexed By Thread Previous: Re: WinNT and C2
From: Leonard Miyata <leonard @ geminisecure . com>
Next: Re: WinNT and C2
From: Chris Inskeep <inskeep_chris @ geologics . com>

Google
 
Search Internet Search www.greatcircle.com