Re: Worms, Air Gaps and Responsibility

[Gwendolynn ferch Elydyr <gwen () reptiles org>]

On Mon, 10 May 2004, Mason Schmitt wrote:
> A recent SANS webcast talked about using true thin client hardware or
> terminal server clients (and equivalents such as citrix, X, etc) for
> providing remote users or risky users access to document stores, and
> other LAN resources.  I think that using a thin client as a security
> tool is a great idea.

Heh. What do they say? "Everything old is new again"?

For the terminal server hardware, I've got a bit less to say [but are
you -sure- where that image came from?] - but in the case of the
software thin clients, you're -still- running on a platform with
unknown security, and reaching into the enterprise.  Thin clients also
don't address the question of having a box with a live connection to
the Internet and your enterprise - it just moves it around.

> The thin client gets around this headache nicely.

... and gets you back into a different set of headaches - provisioning
servers and links that are sturdy enough to handle a pile of remote
connections.

cheers!
==========================================================================
"A cat spends her life conflicted between a deep, passionate and profound
desire for fish and an equally deep, passionate and profound desire to
avoid getting wet.  This is the defining metaphor of my life right now."

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards