Security Basics mailing list archives
RE: suggestions on a good firewall
From: "Chris Berry" <compjma () hotmail com>
Date: Mon, 26 May 2003 16:14:31 -0700
From: "David Ellis" <David.Ellis () unicam com> Let me ask a question here? Why would anyone want tight active directory integration on a firewall which by all means constitutes a security flaw? Keep your active directory far from your firewall. A firewall is a security product and shouldn't be integrated into your internal network at all, besides VPN into your lan.
For website proxy lists that are tied to your internal organization setup. ISA is alot more than just a firewall, like most Microsoft products it combines multiple services to ease administration. Depending on your level of expertise, and the amount of people you have to do maintenance, that may be a good thing. After all, having the most secure setup available is worthless if you don't have time to keep it all current. I understand your point of view, however, I don't see this as being any worse than using LDAP with SQUID which I know many people do.
Chris Berry compjma () hotmail com Systems Administrator JM Associates"All I want is a few minutes alone with the source code for the universe and a quick recompile."
_________________________________________________________________The new MSN 8: advanced junk mail protection and 2 months FREE* http://join.msn.com/?page=features/junkmail
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- RE: suggestions on a good firewall, (continued)
- RE: suggestions on a good firewall Trevor (May 26)
- RE: suggestions on a good firewall dave (May 23)
- RE: suggestions on a good firewall Christopher Harrington (May 23)
- RE: suggestions on a good firewall Des Ward (May 26)
- RE: Re[4]: suggestions on a good firewall Christopher Harrington (May 26)
- RE: suggestions on a good firewall David Ellis (May 26)
- RE: suggestions on a good firewall David Moisan (May 27)
- RE: suggestions on a good firewall David Ellis (May 26)
- RE: suggestions on a good firewall Christopher Harrington (May 26)
- Re: RE: suggestions on a good firewall Spencer Hall (May 27)
- RE: suggestions on a good firewall Chris Berry (May 27)
- RE: RE: suggestions on a good firewall DeGennaro, Gregory (May 28)
- RE: suggestions on a good firewall Christopher Harrington (May 28)
- RE: suggestions on a good firewall David Ellis (May 28)
- RE: suggestions on a good firewall David Moisan (May 28)
- RE: suggestions on a good firewall Jon Pastore (May 30)
- RE: suggestions on a good firewall David Moisan (May 28)