Re: wVirtual Firewall

[Banyan He <banyan () rootong com>]

Martin, indeed, you put a windows OS opening to the internet. Even you 
can set the embedded firewall up to protect the hoster itself, it's 
still a potential hole to your security infrastructure.

Or, you can try this out. Put ACL on the L2 switch to restrict the 
access to the hoster, can be up to only a local access. Leave the 
virtual guest alone. It can be done by using the MAC address.

You can verify the security policy from L2 to L7 by scanning the port or 
whatever later then.

Best regards,

------------
Banyan He
Blog: http://www.rootong.com
Email: banyan () rootong com

On 2012-10-15 11:30 AM, Martin Nitwit wrote:
> Hello all,
>
> Firstly thank you in advance for any input. I have been having a
> question about Virtual firewall it would be nice if all you experts can
> help to clear it up for me.
>
> Say if a virtual firewall is installed on a windows computer (Bridged)
> with 2 NIC, that gives 2 external (1 physical and 1 virtual) and 2
> internal IP addresses.
>
> While the IT admin can do everything to protect the virtual firewall and
> whatever behind it, my question is, isn't the physical computer's
> external IP open for attack?
>
> Thanks again if you don't mind helping to clear that up.
>
> Regards,
> Martin
>
>
>
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
> it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
> install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------