🚀 go-pugleaf

Since you are using the Raptor firewall, I would suggest using their VPN
solution to encrypt the traffic.  The 6.5 release incorporates a personal
firewall for the remote users running NT, 95 or 98.  They also allow
various types of authentication to be used with the VPN solution to meet
the needs of your security policy.  The mobile clients for 6.5 will be free
too.  Other VPN solutions are compatible with the Raptor solution as well.
A database of this information is in ate works at www.firetower.com.

  -Kathleen

_______________________

Kathleen M. Moriarty



                                                                                                 
                    "Laura                                                                       
                    Usakowski"           To:     firewalls@lists.gnac.net                        
                    <USAKOLAU@aqu        cc:     (bcc: Kathleen Moriarty/FactSet)                
                    inas.edu>                                                                    
                                         Subject:     Access to internal campus server via       
                    04/04/00             Internet firewall                                       
                    10:22 AM                                                                     
                                                                                                 
                                                                                                 





Attention Firewalls Group.

As one part of our security plan, we have implemented a Raptor
firewall between the Internet (External network) and the campus
networks.  The campus networks include a DMZ zone (mail
servers, web servers, etc.) and an Internal network (campus-only
servers (Linux) and file servers (NetWare 5), Intranet web servers,
etc.).

We  have a proposal up for discussion.  I would like opinions on the
security implications.

Proposal:

The need is to provide access to an internal campus Unix server
from the Internet.  The required access would be telnet and ftp.

This access would be provided through the firewall.  We would
assign an IP address on the external network.  Our firewall would
provide a virtual connection to the internal Unix server (private class
A) address.  The Unix server has a dial-out only modem/phone line
installed.

What are the _specific_ security concerns with this proposal?  Are
there any risks to other servers on the internal network?  Are there
any recommendations or alternatives on how to implement this
type of access while minimizing the security risks.  Does it matter
on the firewall vendor we have?  Does it matter that we have a
modem installed in the server?


------------------------------
Laura Usakowski, Network Administrator
Aquinas College, Information Technology & Services
1607 Robinson RD SE, Grand Rapids MI 49506 USA
http://www.aquinas.edu, 616-459-8281 x3729
usakolau@aquinas.edu
Personal e-mail: laurag9909@aol.com
-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]



-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]