Any sort of Telnet can be compromised too easily.
Strategy: Don't do it.
If you -must- allow telnet, authenticate with one time authentication,
but assume any data the person accesses on the inside can be accessed by
anyone. (Telnet is all plaintext)
Better strategy: invest in SSH or some type of VPN product. Try VPNet
(www.vpnet.com) for a product that does site-to-site hardware VPN,
as well as taking client machien (win95) VPN connections, all using dynamic
key exchange to maintain security.
-Matt
On Thu, 24 Apr 1997 PAUL .
SMITH @
arpstl-emh2 .
army .
mil wrote:
[snip]
> And now my question:
>
> I have recently been hit with requests for Telnet access from public
> hosts to the private side of our network (through the firewall). What
> is the current strategy in regards to this?
References:
|
|