RE: Center Control and Department's Firewall

[security () rexwire com]

I would no access besides logs. Have them create a ticket anytime they need
a change.


-SKP

-----Original Message-----
From: khan rohail [mailto:rohaikaz () yahoo com] 
Sent: Friday, June 20, 2003 12:45 PM
To: security-basics () securityfocus com
Subject: Center Control and Department's Firewall 


Hello

We are in process of creating policy on how much (if
any)control can we give to department's administrators
to the firewall that will be installed at demarc
point. 
Either the firewall will be installed between the
router's interface and demarc point for a particular
department or just after that. Varies from department
to department. Departments are the one who will pay
for their firewall. 

Let say if we do give them some access to firewall,
what do you guys recommend, how much/what access can
we give them to the firewall. But being the
core/center service provider we dont want them to poke
holes in firewall and render it useless.

Thanks


__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------