Re: Inbound Default Deny Policy at Internet Border

[Daniel Adinolfi <dra1 () CORNELL EDU>]

On May 13, 2005, at 16:29, Scholz, Greg wrote:

> > Active FTP will fail.  You will either need to allow for it or have
> > users use passive FTP.
>
> It is my understanding that many modern firewalls account for these
> behaviors.

Indeed.  I was assuming this would be done with router ACLs, which is
probably not the case.  (It's the way we do things here.)

Thanks for the clarification.

-Dan

_________________
Daniel Adinolfi, CISSP
Senior Security Engineer, IT Security Office
Cornell University - Office of Information Technologies
email: dra1 () cornell edu   phone: 607-255-7657

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.