RE: Security of satellite links into an organisation

[Randy Garbrick <randy.garbrick () gettyimages com>]

You should probably put the proxy and the satellite link in front of your firewall.  If you can use the same router for 
the land line and the satellite downlink, it would be fairly easy to set up the routing    

-----Original Message-----
From: Wigg, Guy G [mailto:GWigg () mail sbic co za]
Sent: Thursday, January 25, 2001 6:43 AM
Subject: [fw-wiz] Security of satellite links into an organisation


Hi all

Bandwidth in South Africa is expensive and the response times are not at all
that great. We have decided that a good solution for surfing the net is via
satellite. One of the SA ISPs offer this service. This would be the basic
set-up, they supply a proxy (MS proxy) that they propose sits on the
organisation's backbone network. 

The http request exits the organisation via our landlines to a proxy at the
respective ISP. On exiting we obviously control the connection via the
firewall we have in place. The ISP then sends the return WebPages to the
organisation via the satellite dish. My question is what is the security
risk of this set-up? We now have an unprotected pipe coming into the
network. Agreed the hacker wouldn't get any responses since the dish can
only receive (the responses would blocked by the land FW infrastructure).
What risk would we be putting ourselves at?

Any feedback on this would be greatly appreciated.

thanks
Guy


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards