Re: firewalls and routers

["Paul D. Robertson" <paul () compuwar net>]

On Tue, 14 Nov 2006, phil connelly wrote:

> I'm afraid I have some really basic questions (I'm trying to resolve a 
> potential security issue where I work).
>
> 1. if we are using a router, does that mean a computer that processes credit 
> cards does not need to have its firewall enabled?

[Dusts off the old soapbox]  That depends upon your security policy.  
That's the document that says what's permissable, what's not, what level 
of protection each asset or category of assets have, and potentially how 
it's all implemented and audited.  If you're gonna do it right, you gotta 
start at step one.

> 2. can a router have a firewall and if so, how does one get to it to 
> configure it?

Depends on the router, but it should be in the vendor's documentation that 
came with the device.  That, along with the saved configuration should be 
part of your disaster recovery package...

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
paul () compuwar net       which may have no basis whatsoever in fact."
http://fora.compuwar.net      Infosec discussion boards 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards