RE: IP KVM switches

["Nathaniel Hall" <halln () otc edu>]

I would say that any KVM connected to servers, whether over IP or not,
shouldn't be used on a daily basis.  Servers should not be logged into
locally (or locally over IP) due to security.

I find that KVM over IP is a very good solution for unplanned events (such
as server crashes that require immediate reboot, even though they should be
looked at for possible intrusions, or for a software upgrade that should be
performed locally.)

~~~~~~~~~~~~~~~~~~~~~~~~~~

Nathaniel Hall
Intrusion Detection and Firewall Technician
Ozarks Technical Community College -- Office of Computer Networking

halln () otc edu
417-799-0552

-----Original Message-----
From: Jason Haith [mailto:jhaith () genesissys com] 
Sent: Monday, August 16, 2004 1:53 PM
To: Brasha; security-basics () securityfocus com
Subject: RE: IP KVM switches

Brasha,

We use an Avocent KVM over IP and I don't care for it much. It lags
constantly and is extremely frustrating. Does however come in handy when it
is the only way to access a machine. I wouldn't recommend for daily use, but
this is just my opinion.

Jason Haith

-----Original Message-----
From: Brasha [mailto:brahsha () yahoo com]
Sent: Tuesday, August 10, 2004 9:52 AM
To: security-basics () securityfocus com
Subject: IP KVM switches


Hello,

We have few core application servers protected by
firewall and with sufficient physical security.  Due
to space constraints system administrators workspace
is being relocated to a distant building. Management
wants to use HP IP KVM switches to manage the
application servers remotely.

I would like to know the experiences of the user
community and security issues related to IP KVM
switches.

Kudos
Brahsha.




__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the
skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------





---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.securityfocus.com/sponsor/InfoSecInstitute_security-basics_040817
----------------------------------------------------------------------------