Re: Firewall Administration

["Davis, Thomas R." <tdavis () IU EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----Original Message----
From: Hart, Lee Anne [mailto:LeeAnne.Hart () MONTGOMERYCOLLEGE EDU]
Sent: Wednesday, June 08, 2005 12:29 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Firewall Administration

> who maintains your firewalls - hardware and operating system, 
> not the firewall software?

Our network engineers maintain the hardware and operating systems on
our network firewalls.  In fact, they are also responsible for
maintaining the firewall software and rule sets.  We have read access
only to the firewall configuration and logs (and that's the way I
prefer it).  Our role is to recommend what policies should be in
place on the firewall and then they implement those policies.

We have an excellent working relationship with our networking staff. 
And, as others have mentioned, that is key to making such an
agreement work.

- -- 
Tom Davis, IT Security Officer, CISSP, CISM, GCIA
Office of the VP for Information Technology, Indiana University
PGP key or S/MIME certificate: https://itso.iu.edu/Tom_Davis

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQrCO1nMQ7XQGtBENEQIKDQCg4X+onw5rDeYDXk7/MpT0U72lOBUAoK0O
YTbk/4IYJCsMH+IPAOoQLxsw
=JavP
-----END PGP SIGNATURE-----