Re: Looking for information regarding the use of Skype in an Enterprise network

["Sam Evans" <wintrmte () gmail com>]

Agreed - but I think this is true of any client application (look at
AIM, MSN Messenger, etc.).  The mitigating technologies underneath
(AV, application firewall on the host, etc.) will hopefully help out
there.

But, I do get your point and it is a valid one at that.

On Wed, Jan 7, 2009 at 11:19 AM, Adriel T. Desautels
<ad_lists () netragard com> wrote:
> Sam,
>        There are probably vulnerabilities in skype that would allow an
> attacker to penetrate into your network by just sending you a message, not
> just file xfers.
>
>
> On Jan 7, 2009, at 1:16 PM, Sam Evans wrote:
>
> > I didn't explain the business use case for needing Skype, I apologize.
> > The thought from our business folks is that their customers already
> > use Skype today to do video conferencing, so it seems like a logical
> > choice for them to also use Skype to make calls to those customers.
> >
> > I agree, Skype could be used to penetrate a network, most specifically
> > if a user decides to share out a network shared drive, or some other
> > repository.
> >
> >
> >
> > On Wed, Jan 7, 2009 at 11:07 AM, Adriel T. Desautels
> > <ad_lists () netragard com> wrote:
> > > Why not just use the telephone?
> > >
> > > Skype can be used to penetrate into your network if someone write the
> > > right
> > > tool for it.
> > >
> > > On Jan 7, 2009, at 12:02 PM, Sam Evans wrote:
> > >
> > > > All,
> > > >
> > > > I'm looking to find out how many large enterprise's have allowed the
> > > > use of Skype on their networks.  We are currently evaluating the use
> > > > of Skype as a method to make end to end customer calls and am
> > > > concerned with the security aspects of the product.
> > > >
> > > > I'm curious what security policies companies have put into place
> > > > regarding the use of Skype.
> > > >
> > > > Thanks,
> > > > Sam
> > >
> > >
> > >
> > >      Adriel T. Desautels
> > >      ad_lists () netragard com
> > >      --------------------------------------
> > >
> > >      Subscribe to our blog
> > >      http://snosoft.blogspot.com
>
>
>
>        Adriel T. Desautels
>        ad_lists () netragard com
>        --------------------------------------
>
>        Subscribe to our blog
>        http://snosoft.blogspot.com